Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

netintel

2473

kjgueye/netintel-mcp

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 169 tokens together

Pay-per-call network, domain, web and inference lookups for agents — DNS, SSL, WHOIS, IP reputation, email verification, web fetch & search, OpenAI-compatible gateway, embeddings, market data — in USDC over x402. No API keys, and the plugin never holds a key or signs a payment: each paid call is handed, with its exact.

not rated 1 changed 9d ago A tokens not measured original MIT

cqnce-mcp

2474

cqnce-app/cqnce-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing cQnce human-in-the-loop authorization as AI-callable tools. Runs locally from the @cqnce/mcp-server npm package. Needs 2 environment variables to run.

not rated 1 1mo ago A tokens not measured original MIT

codescan

2475

cocodedk/codescan

MCP server Claude CodeCodexCursor +2

Scans the code for security leaks. Runs locally from the codescan Python package.

not rated 1 6d ago A tokens not measured

lion-screen-before-pay

2476

8dp6brm9hp-svg/lion-mcp-public

Skill Claude CodeCodex

Before your agent sends USDC to an x402 payTo, screen that address with LION's $0.001 OFAC wallet screen. PASS proceeds. WARN or BLOCK aborts. The same wallet again is the $0.01 recheck. GO proceeds. HOLD or STOP aborts.

not rated 1 changed 25d ago A 65 tokens original MIT

centia

2477

centia-io/mcp-server

Plugin Claude Code

Bundles 21 skills, 1 MCP server · 1,341 tokens together

Centia BaaS for Claude Code: the Centia MCP server (tools generated from the Centia OpenAPI spec) plus skills covering runtime SDK usage, provisioning, JSON-RPC, auth, OGC/OWS services, snapshots, scheduler, realtime and delivery rules.

not rated 1 1mo ago A tokens not measured

cursor-rule

2478

iansherr/determinagents

Cursor rule Cursor

DeterminAgents audit harnesses — apply when the user asks for a code audit, security review, test-gap analysis, or autonomous completion loop.

not rated 1 1mo ago A 28 tokens

burp-suite

2479

legendwon/cau-eclass-mcp

MCP server Gemini CLI

MCP server "burp-suite", hosted remotely at 127.0.0.1, as configured in legendwon/cau-eclass-mcp.

not rated 1 27d ago A tokens not measured original MIT

dechonet

2480

node-man/dechonet-mcp

Plugin Gemini CLI

Check domains, links and IP addresses from public data: security score, phishing signals, DNS, TLS, email authentication and change history.

not rated 1 changed 2d ago A tokens not measured

vulnary

2481

Agam-S/Vulnary-MCP

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 82 tokens together

Look up CVEs (NVD) and scan packages and dependency files for known vulnerabilities (OSV.dev).

not rated 1 21d ago A tokens not measured original MIT

redact-pdf-ai

2482

dambuchs/redact-pdf-mcp

Plugin Claude Code

Bundles 2 skills, 1 MCP server · 183 tokens together

Redact or anonymize PDFs, scans and screenshots on your machine before an AI or anyone else sees them. Black boxes, or consistent [Person 1] tags that keep the document readable, with the real names put back locally afterwards.

not rated 1 4d ago A tokens not measured original MIT

safe-web-fetch

2483

Sanoy24/safe-fetch-mcp-server

Skill Claude CodeCodex

Fetch public web pages safely through the safe-fetch MCP server's fetchurl tool. Use whenever you need the content of a URL (docs, articles, READMEs, feeds, JSON APIs). Covers paging long pages, handling refusals and errors, and treating fetched text as untrusted data.

not rated 1 changed today B 63 tokens original MIT

Knuckles-Team/archivebox-api

Skill Claude CodeCodex

Develop and maintain the ArchiveBox connector while preserving its governed API actions, web-source contract, credential boundary, package resources, and public-first release evidence.

not rated 1 changed today A 35 tokens original MIT

alpacon

2485

alpacax/alpacon-mcp

Plugin Claude Code

Bundles 1 skill, 1 hook, 1 MCP server · 99 tokens together

Let AI agents operate your infrastructure under your control. Connects the agent to Alpacon, which checks each command at runtime, holds risky ones for human approval, and records them for audit. A bundled skill and hook keep the agent on Alpacon's MCP tools.

not rated 1 yesterday A tokens not measured original MIT

agent-receipts

2486

webaesbyamin/agent-receipts

Plugin Claude Code

Bundles 3 hooks

A signed receipt for every file edit, file write, notebook edit and shell command Claude Code makes, and a summary when the session ends. Hashes only: no commands, file contents or output.

not rated 1 5d ago A tokens not measured original MIT

lazaretto

2487

jamesdfinance-dev/lazaretto-mcp

Plugin Cursor

Bundles 1 MCP server

Check a package, MCP server or agent skill before your agent installs it: free lockfile malware check, known-bad lookups, and a finder for MCP servers.

not rated 1 changed 3d ago A tokens not measured original MIT

72stack-sec

2488

Little-H-lying-flat/72stack-sec

Skill Claude CodeCodex

A Chinese-language workflow for authorized security testing and bug bounty work, where researchers look for and report vulnerabilities in websites, applications, and cloud systems.

not rated 0 changed 1mo ago A 234 tokens original

zzop

2489

eezz4/zzop

Plugin Claude Code

Bundles 1 command, 1 MCP server · 21 tokens together

Deterministic repository oracle for AI agents: point it at a repo and get one JSON answer — inventory, dependency graph, per-file risk, and the frontend-call x backend-route join — byte-identical for the same input, with its blind spots named rather than guessed past. TypeScript/JavaScript, Python, Java, C#, Rust, Go.

not rated 0 changed 4d ago A tokens not measured original MIT

hunter

2490

kleosr/kleosrules

Agent Claude Code

Logic-bug and vulnerability hunter for the current diff. Use for /hunter, a security pass, or review before a PR. Not for docs or formatting.

not rated 0 changed 1mo ago A 34 tokens original MIT

palisadescan/palisade

Skill Claude CodeCodex

Onchain security scanner on Robinhood Chain — scan token approvals, detect honeypots, analyze contracts for rugpull indicators, check liquidity locks, and score contract safety. Use when a user asks an agent to evaluate, scan, or check a token or wallet before trading, swapping, signing an approval, or investing. 18…

not rated 0 3mo ago A 97 tokens original MIT

whitepact

2492

Guruprasath-Annadurai/Whitepact

MCP server Claude CodeCodexCursor +2

ResponsibleAI — Enterprise AI Governance Platform: trust scoring, bias detection, hallucination detection, guardrails, compliance (NIST AI RMF / EU AI Act / ISO 42001), cost intelligence, drift monitoring. Runs locally from the rai-governance-platform Python package. Needs 1 environment variable to run.

not rated 0 5d ago A tokens not measured original

twzrd-trust

2493

twzrd-sol/twzrd-trust

Skill Claude CodeCodex

Discover x402 callables then check the seller BEFORE paying. Free resource join (GET /v1/intel/resources) lists listed|live402 claims; free preflight returns a ReadinessCard (allow / warn / block) from the observed Solana and Base x402 corpus. Composes with any x402 payer skill: discover → merchantcard wash refuse →…

not rated 0 changed 2d ago A 532 tokens original MIT

altweb-context

2494

danielsoimu/altweb

MCP server Claude CodeCodexCursor +2

Loads signed ALTWEB context capsules — refuses unsigned, tampered, or untrusted by default. Runs locally from the altweb-context npm package. Needs 1 environment variable to run.

not rated 0 25d ago A tokens not measured AGPL-3.0

email-leak-notice

2495

didvc/claude-email-leak-notice

Plugin Claude Code

Bundles 1 hook

Claude Code injects your account email into session context, where an agent may reuse it as a legitimate value and commit it. This warns once per session when a personal address appears in a tool payload. Never blocks.

not rated 0 3mo ago A tokens not measured original MIT

drewrukin/llm-code-security-review-mcp

MCP server Claude CodeCodexCursor +2

MCP server "llm-code-security-review-mcp" as configured in drewrukin/llm-code-security-review-mcp. Runs locally from the llm-code-security-review-mcp Python package.

not rated 0 2mo ago A tokens not measured original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: