Security

25,251 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

mcp-tool-auditor

2377

princeruhulofficial/mcp-tool-auditor

MCP server Claude CodeCodexCursor +2

MCP server "mcp-tool-auditor" as configured in princeruhulofficial/mcp-tool-auditor. Runs locally from the mcp-tool-auditor npm package.

not rated 0 1mo ago A tokens not measured original MIT

webroot-mcp

2378

MSPbotsAI/webroot-mcp

MCP server Claude CodeCodexCursor +2

MCP server "webroot-mcp" as configured in MSPbotsAI/webroot-mcp. Runs locally from the webroot-mcp Python package.

not rated 0 26d ago A tokens not measured

ergoveritas1-alt/certscore.ai

Skill Claude CodeCodex

Use this when the user asks to scan a website for cookies, trackers, consent, GDPR, CCPA, or privacy risk. Run an evidence-backed privacy preflight before launch, vendor review, audit triage, or human compliance review.

not rated 0 changed 4d ago A 54 tokens

gauntlet

2380

oscarsterling/clelp-skills

Skill Claude CodeCodex

Adversarial hardening loop for security-critical code, especially hooks and guards that must never fail open. Two models from different labs attack the same code for concrete, reproducible failures; an orchestrator adjudicates; a separate fixer closes the enumerable class; repeat until both models return zero…

not rated 0 yesterday A 81 tokens original MIT

cli

2381

crclabs-hq/GateTest

MCP server Claude CodeCodexCursor +2

GateTest — 120-module QA gate with MCP. Eyes (screenshot live pages), ears (production errors), hands (verify fixes worked). Security, supply chain, AI safety, mutation testing. Iterative Claude fix loop. Replaces SonarQube + Snyk + ESLint + 10 others. Runs locally from the @gatetest/cli npm package.

not rated 0 today A tokens not measured original MIT

mcp

2382

Helixar-AI/helixar-mcp

MCP server Claude CodeCodexCursor +2

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases. Remote server at mcp.helixar.ai.

not rated 0 1mo ago A tokens not measured original Apache-2.0

radmail-mcp

2383

dougsureel-tech/radmail-mcp

MCP server Claude CodeCodexCursor +2

RadMail MCP server — email operating system for agents: two-axis triage (importance x urgency), a 'Right Now' lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money / changed-banking / first-contact / decision /. Runs locally from the radmail-mcp npm package.

not rated 0 2mo ago A tokens not measured copy · 100% MIT

rail-score

2384

Responsible-AI-Labs/rail-score-mcp

MCP server Claude CodeCodexCursor +2

Responsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP. Remote server at mcp.responsibleailabs.ai.

not rated 0 2mo ago A tokens not measured original MIT

safe4

2385

Safe4AI/safe4-mcp

MCP server Claude CodeCodexCursor +2

Tests an AI agent's purchase against the task it was given. Paid per call in USDC via x402. Remote server at api.safe4.ai.

not rated 0 17d ago A tokens not measured original MIT

PabloLec-keyprobe-mcp

2386

PabloLec/KeyProbe-MCP

MCP server Claude CodeCodexCursor +2

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.… Remote server at server.smithery.ai.

not rated 0 1y ago A tokens not measured original Apache-2.0

scry

2387

TunnelMind/scry-mcp

MCP server Claude CodeCodexCursor +2

Free IPv4 lookups against a distributed attacker-observation corpus. Remote server at mcp.tunnelmind.ai.

not rated 0 3mo ago A tokens not measured archived

vantic

2388

vanticlabs/vantic

MCP server Claude CodeCodexCursor +2

Verify an AI agent's payment authority: signed mandates, allowlists, and tamper-proof receipts. Runs locally from the @vantic/sdk npm package.

not rated 0 1mo ago A tokens not measured original Apache-2.0

webhook-co/webhook

Skill Codex

Diagnose why an inbound webhook signature fails to verify, and write correct verification code for a named provider. Use when a signature check rejects real traffic, when a webhook works in a provider's test console but not against your server, or when you are implementing verification for Stripe, GitHub, Shopify…

not rated 0 3d ago A 112 tokens original Apache-2.0

mcp-server

2391

blackducksoftware/mcp-server

MCP server Claude CodeCodexCursor +2

AI-powered security scanning using Black Duck Signal for vulnerability detection. Runs locally from the @black-duck/mcp-server npm package.

not rated 0 11d ago A tokens not measured original MIT

blackwall

2392

bluetieroperations-create/blackwall-mcp

MCP server Claude CodeCodexCursor +2

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email). Runs locally from the blackwall-mcp npm package. Needs 2 environment variables to run.

not rated 0 16d ago A tokens not measured

bynn

2393

Bynn-Intelligence/skills

Plugin Claude Code

Bundles 10 skills · 979 tokens together

Document fraud detection for manipulated, fake and AI-generated PDF and image documents, plus identity verification and KYC sessions, age verification, content moderation, face search, AutoDoc invitations, and webhook verification. Bundles the Bynn MCP server.

not rated 0 20d ago A tokens not measured original MIT

Checkmarx/cx-agentic-ai

Skill Claude CodeCodex

Runs a Checkmarx ASCA (AI Security Code Assistant) SAST scan on a SOURCE CODE file to detect code vulnerabilities, and remediates findings using the Checkmarx MCP tool. Use when a user asks to scan or fix a source code file (.py/.js/.java/.go/.ts/…) for security vulnerabilities. For dependency manifests/lockfiles…

not rated 0 3d ago A 120 tokens original Apache-2.0

a2aidentitytoll-mcp

2395

clauxel/a2a-identity-toll-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for A2A caller identity, scope policy, verdict receipts, and audit history. Remote server at a2aidentitytoll.clauxel.com.

not rated 0 3mo ago A tokens not measured original MIT

bumblebeereceipt-mcp

2397

clauxel/bumblebee-endpoint-receipt-mcp

MCP server Claude CodeCodexCursor +2

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs. Remote server at bumblebeereceipt.clauxel.com.

not rated 0 3mo ago A tokens not measured

clauxel/copilot-cli-switch-gate-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for Copilot CLI switch gate MCP, structured receipts, audit logs, and reviewer-ready evid. Remote server at copilotcliswitchgate.clauxel.com.

not rated 0 3mo ago A tokens not measured original MIT

mcpoauthscopegate-mcp

2400

clauxel/mcp-oauth-scope-gate-mcp

MCP server Claude CodeCodexCursor +2

OAuth scope approvals and consent receipts for remote MCP servers. Remote server at mcpoauthscopegate.clauxel.com.

not rated 0 3mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: