25,251 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Risk score for a Base wallet before your agent pays it: 0-100, verdict and explained flags. Runs locally from the @walletbureau/mcp npm package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
Sanctions screening, KYB, identifier validation, jurisdiction risk & secret scanning for AI agents. Remote server at watchtower-api.com.
MCP server Claude CodeCodexCursor +2
Security audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs. Runs locally from the @wphealthkit/mcp-server npm package. Needs 1 environment variable to run.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 110 tokens together
logi Agent Approval Gate — request human approval on a user's phone before an AI agent performs a high-risk action (budget changes, production deploys, payments, mass communications).
joeyycli/constitution-lint-action
Plugin Claude Code
Bundles 1 command, 1 MCP server · 18 tokens together
Lint a CLAUDE.md-style agent constitution for missing operational guardrails — 10 heuristic checks (spend limits, injection defense, escalation path, secrets handling, ledger discipline, session ritual, referenced state files). Adds a /lint-constitution command.
MCP server Claude CodeCodexCursor +2
Verification and trust checks for AI agents: validate, screen, propose, accounts, usage. Runs locally from the @madtaco/mcp npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Local stdio MCP server for YAFL – an agent-first, end-to-end-encrypted file-transfer layer. Runs locally from the @yafldev/mcp npm package.
MCP server Claude CodeCodexCursor +2
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0. Remote server at mcp.tweetfeed.live.
MCP server Claude CodeCodexCursor +2
Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks. Remote server at hackmyip.com.
MCP server Claude CodeCodexCursor +2
Find every leaked secret on your machine — API keys in .env files, shell history, and configs. Runs locally from the ghosthunt npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
MCP server "agent-action-gate" as configured in AAH20/agent-action-gate. Launched with https://github.com/AAH20/agent-action-gate/releases/download/v0.2.0/agent-action.
MCP server Claude CodeCodexCursor +2
Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets. Runs locally from the @aiwerk/mcp-server-vault npm package. Needs 5 environment variables to run.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 419 tokens together
Governed local-LLM observability: model policy, prompt scanner, capture proxy, 21 tools.
MCP server Claude CodeCodexCursor +2
MCP server "phi-guard" as configured in Abidit/phi-guard-mcp. Runs /mnt/code/phi-guard-mcp/dist/index.js with node.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 256 tokens together
Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 378 tokens together
Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 294 tokens together
Governed Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.
MCP server Claude CodeCodexCursor +2
MCP server for AI Firewall - multi-agent LLM security layer. Runs locally from the ai-firewall-mcp Python package.
MCP server Claude CodeCodexCursor +2
Multi-CI security scanner with a live threat-intel feed of compromised CI components. Remote server at ci-sentinel.vercel.app.
MCP server Claude CodeCodexCursor +2
IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s. Remote server at cloud-pathfinder.vercel.app.
MCP server Claude CodeCodexCursor +2
Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install. Runs locally from the import-guardian-mcp npm package.
MCP server Claude CodeCodexCursor +2
Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains. Runs locally from the @domainintel/mcp npm package.
Br0ski777/email-deliverability-x402
MCP server Claude CodeCodexCursor +2
Audit email domain deliverability: SPF, DKIM, DMARC, MX. Score 0-100. x402. Remote server at email-deliverability.api.klymax402.com.
Plugin Claude Code
Scores the blast radius of a shell command before your agent runs it — advisory, never blocking. Same command, opposite score depending on what it would actually hit.