Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

llm-redteam-mcp

2449

Aeronique/llm-redteam-mcp

MCP server Claude CodeCodexCursor +2

MCP server "llm-redteam-mcp" as configured in Aeronique/llm-redteam-mcp. Runs locally from the llm-redteam-mcp Python package.

not rated 1 +1 4mo ago A tokens not measured original MIT

opencti-usage

2450

Space-C0wboy/OpenCTI-MCP-Server

Skill Claude CodeCodex

Use when working with the OpenCTI threat-intelligence platform via the opencti MCP tools — explains OpenCTI's STIX data model, entity types, indicators vs observables, relationships, containers, TLP markings, confidence, connectors/ingestion, and RBAC, and maps each concept to the right MCP tool. Load before creating…

not rated 1 +1 2d ago A 91 tokens original MIT

crtsh-mcp

2451

Dthen/crtsh-mcp

MCP server Claude CodeCodexCursor +2

MCP server "crtsh-mcp" as configured in Dthen/crtsh-mcp. Runs locally from the crtsh-mcp Python package.

not rated 1 1mo ago A tokens not measured original 0BSD

kali-mcp-server

2453

bsahane/kali-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "kali-mcp-server" as configured in bsahane/kali-mcp-server. Runs locally from the kali-mcp-server Python package.

not rated 1 1mo ago A tokens not measured copy · 100% Apache-2.0

vaultwarden-mcp

2454

jr2804/vaultwarden-mcp

Skill Claude CodeCodex

Use when the user wants to access, look up, create, edit, or manage credentials, passwords, secrets, login entries, secure notes, TOTP/2FA codes, or vault items in their Vaultwarden / Bitwarden vault via the vaultwarden-mcp MCP server. Trigger whenever the user mentions passwords, credentials, logins, secrets, vault…

not rated 1 +1 1mo ago A 151 tokens original MIT

acel-core

2455

Purav-Kanda/Acel

MCP server Claude CodeCodexCursor +2

Agent Contract Enforcement Layer — runtime verification of AI agent tool calls (core monitor). Runs locally from the acel-core Python package.

not rated 1 2mo ago A tokens not measured original MIT

pwncat-mcp

2456

Vip3r-MC/pwncat-mcp

MCP server Claude CodeCodexCursor +2

Reverse and bind shell automation framework with MCP server. Runs locally from the pwncat-mcp Python package.

not rated 1 2mo ago A tokens not measured original MIT

bunkervm

2457

ashishgituser/bunkervm

MCP server Claude CodeCodexCursor +2

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP. Runs locally from the bunkervm Python package.

not rated 1 2mo ago A tokens not measured original MIT

nullsec-redteam-ai

2458

Panda1847/NullSec-RedTeam-AI

MCP server Claude CodeCodexCursor +2

MCP server "nullsec-redteam-ai" as configured in Panda1847/NullSec-RedTeam-AI. Runs locally from the nullsec-redteam-ai Python package.

not rated 1 2mo ago A tokens not measured original MIT

ctf-forensics-plus

2459

cornhub69-x/botduachuot_mcp

Skill Claude CodeCodex

Deep-dive CTF forensics with evidence-first triage: media metadata, PCAP, disk images, and memory images. Use after initial triage when the challenge is a media/pcap/disk/memory artifact and the technique family is uncertain.

not rated 1 2mo ago A 0 tokens

mcp2agy-fixer-agent

2460

uziii2208/mcp2agy

Skill Claude CodeCodex

Code Fixer subagent definition for the mcp2agy pipeline. This agent produces minimal, correct, testable fixes for verified security findings. Do NOT use this agent directly — it is invoked by the audit pipeline orchestrator.

not rated 1 2mo ago A 54 tokens original MIT

weave-browser

2461

Tyox-all/Weave_Protocol

Skill Claude CodeCodex

Use this skill when the user is building, securing, or auditing a browser-based AI agent (Playwright, Puppeteer, Stagehand, browser-use, or custom browser automation). Triggers on requests to "secure my browser agent", "detect prompt injection in web pages", "block my agent from visiting bad URLs", "scan this page for…

not rated 1 4d ago A 144 tokens original Apache-2.0

mcp-cryptography

2462

daedalus/mcp-cryptography

Skill Claude CodeCodex

MCP server exposing cryptography library functionality including encryption, hashing, and key derivation.

not rated 1 4mo ago A 0 tokens original MIT

mcp-ecdsa

2463

daedalus/mcp-ecdsa

Skill Claude CodeCodex

MCP server for ECDSA cryptography operations.

not rated 1 6mo ago A 0 tokens original MIT

mcp-hashlib

2464

daedalus/mcp-hashlib

Skill Claude CodeCodex

MCP server exposing hashlib functionality.

not rated 1 6mo ago A 0 tokens original MIT

sanitized-db-mcp

2466

ruminaider/sanitized-db-mcp

MCP server Claude CodeCodexCursor +2

MCP server that rewrites SQL to prevent PII/PHI exposure in AI agent queries. Runs locally from the sanitized-db-mcp Python package.

not rated 1 7mo ago A tokens not measured original MIT

chomper

2467

IcHiGo-KuRoSaKiI/Chomper

MCP server Claude CodeCodexCursor +2

A lightweight emulation framework for emulating security algorithms of iOS executables and libraries. Runs locally from the chomper Python package.

not rated 1 1mo ago A tokens not measured original MIT

ton-dev-skills

2468

TesseraeVentures/ton-dev-skills

MCP server Claude CodeCodexCursor +2

TON blockchain development toolkit — security scanner, migration engine, MCP server, and CLI. Runs locally from the @tesserae/ton-dev-skills npm package.

not rated 1 8mo ago A tokens not measured original MIT

symbi

2469

Ezee234/symbi-gemini-cli

Plugin Gemini CLI

Zero-trust AI agent governance for Gemini CLI. Adds ORGA runtime, Cedar policy enforcement, SchemaPin tool verification, and cryptographic audit trails to your development workflow.

not rated 1 26d ago B tokens not measured original Apache-2.0

trooth-network

2471

troothllc/trooth-mcp

MCP server Claude CodeCodexCursor +2

Trooth is an infrastructure & cybersecurity company providing Machine-Readable Trust. Remote server at api.trooth.co.

not rated 1 21d ago A tokens not measured original MIT

commitshow

2472

commitshow/cli

Plugin Cursor

Bundles 2 MCP servers

Score any public GitHub repo 0-100 against the commit.show audit rubric — Lighthouse, repo signals, security, surfaced as paste-ready markdown inside Cursor.

not rated 1 1mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: