27,008 mods in this category, of every kind an
agent can take. Each one carries what it costs per session, what the
scan found, and whether it is the original.
Pay-per-call network, domain, web and inference lookups for agents — DNS, SSL, WHOIS, IP reputation, email verification, web fetch & search, OpenAI-compatible gateway, embeddings, market data — in USDC over x402. No API keys, and the plugin never holds a key or signs a payment: each paid call is handed, with its exact.
★not rated 1
changed 9d agoA
tokens not measured
originalMIT
MCP server exposing cQnce human-in-the-loop authorization as AI-callable tools. Runs locally from the @cqnce/mcp-server npm package. Needs 2 environment variables to run.
★not rated 1 1mo agoA
tokens not measured
originalMIT
Before your agent sends USDC to an x402 payTo, screen that address with LION's $0.001 OFAC wallet screen. PASS proceeds. WARN or BLOCK aborts. The same wallet again is the $0.01 recheck. GO proceeds. HOLD or STOP aborts.
Centia BaaS for Claude Code: the Centia MCP server (tools generated from the Centia OpenAPI spec) plus skills covering runtime SDK usage, provisioning, JSON-RPC, auth, OGC/OWS services, snapshots, scheduler, realtime and delivery rules.
Redact or anonymize PDFs, scans and screenshots on your machine before an AI or anyone else sees them. Black boxes, or consistent [Person 1] tags that keep the document readable, with the real names put back locally afterwards.
★not rated 1 4d agoA
tokens not measured
originalMIT
Fetch public web pages safely through the safe-fetch MCP server's fetchurl tool. Use whenever you need the content of a URL (docs, articles, READMEs, feeds, JSON APIs). Covers paging long pages, handling refusals and errors, and treating fetched text as untrusted data.
Develop and maintain the ArchiveBox connector while preserving its governed API actions, web-source contract, credential boundary, package resources, and public-first release evidence.
Let AI agents operate your infrastructure under your control. Connects the agent to Alpacon, which checks each command at runtime, holds risky ones for human approval, and records them for audit. A bundled skill and hook keep the agent on Alpacon's MCP tools.
★not rated 1 yesterdayA
tokens not measured
originalMIT
A signed receipt for every file edit, file write, notebook edit and shell command Claude Code makes, and a summary when the session ends. Hashes only: no commands, file contents or output.
★not rated 1 5d agoA
tokens not measured
originalMIT
Check a package, MCP server or agent skill before your agent installs it: free lockfile malware check, known-bad lookups, and a finder for MCP servers.
★not rated 1
changed 3d agoA
tokens not measured
originalMIT
A Chinese-language workflow for authorized security testing and bug bounty work, where researchers look for and report vulnerabilities in websites, applications, and cloud systems.
Deterministic repository oracle for AI agents: point it at a repo and get one JSON answer — inventory, dependency graph, per-file risk, and the frontend-call x backend-route join — byte-identical for the same input, with its blind spots named rather than guessed past. TypeScript/JavaScript, Python, Java, C#, Rust, Go.
★not rated 0
changed 4d agoA
tokens not measured
originalMIT
Onchain security scanner on Robinhood Chain — scan token approvals, detect honeypots, analyze contracts for rugpull indicators, check liquidity locks, and score contract safety. Use when a user asks an agent to evaluate, scan, or check a token or wallet before trading, swapping, signing an approval, or investing. 18…
Discover x402 callables then check the seller BEFORE paying. Free resource join (GET /v1/intel/resources) lists listed|live402 claims; free preflight returns a ReadinessCard (allow / warn / block) from the observed Solana and Base x402 corpus. Composes with any x402 payer skill: discover → merchantcard wash refuse →…
Loads signed ALTWEB context capsules — refuses unsigned, tampered, or untrusted by default. Runs locally from the altweb-context npm package. Needs 1 environment variable to run.
★not rated 0 25d agoA
tokens not measured
AGPL-3.0
Claude Code injects your account email into session context, where an agent may reuse it as a legitimate value and commit it. This warns once per session when a personal address appears in a tool payload. Never blocks.
★not rated 0 3mo agoA
tokens not measured
originalMIT
MCP server "llm-code-security-review-mcp" as configured in drewrukin/llm-code-security-review-mcp. Runs locally from the llm-code-security-review-mcp Python package.
★not rated 0 2mo agoA
tokens not measured
originalApache-2.0
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: