Security

25,252 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

onchain-safety-mcp

2545

aitools420/onchain-safety-mcp

MCP server Claude CodeCodexCursor +2

Token-safety for AI agents: rug/honeypot verdict + score across PulseChain, Monad, Base & BSC. Runs locally from the @wickpics/onchain-safety-mcp npm package. Needs 1 environment variable to run.

not rated 0 2mo ago A tokens not measured original MIT

codasms-mcp

2546

ajemba/codasms-mcp

MCP server Claude CodeCodexCursor +2

Receive one-time SMS/OTP verification codes via the CODASMS API: get a number, wait, release. Runs locally from the codasms-mcp npm package. Needs 2 environment variables to run.

not rated 0 25d ago A tokens not measured original MIT

waqi

2547

ajprolific/waqi-mcp

MCP server Claude CodeCodexCursor +2

Redacts PII from your business tools before the AI sees them — with a provable audit log. Remote server at waqi.bilazann.com.

not rated 0 27d ago A tokens not measured

hares

2548

alialrikabi313/hares

MCP server Claude CodeCodexCursor +2

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration). Runs locally from the @alihashim313/hares npm package.

not rated 0 7d ago A tokens not measured original MIT

safeselect

2549

antonillos/safeselect

MCP server Claude CodeCodexCursor +2

MCP server "safeselect" as configured in antonillos/safeselect. Launched with https://github.com/antonillos/safeselect/releases/download/v0.7.9/safeselect-v0..

not rated 0 changed today A tokens not measured original MIT

mcp-blast-radius

2550

aos-standard/mcp-blast-radius

MCP server Claude CodeCodexCursor +2

See what any MCP server can touch — static blast-radius report for every target; manifest optional for divergence detection. Runs locally from the mcp-blast-radius Python package.

not rated 0 1mo ago A tokens not measured original MIT

provenance-mcp

2551

apeirontrade/provenance-mcp

MCP server Claude CodeCodexCursor +2

Wash-traffic risk checks for Algorand x402 endpoints before your agent trusts or pays them. Runs locally from the provenance-mcp npm package. Needs 1 environment variable to run.

not rated 0 2mo ago A tokens not measured

attestd-mcp

2552

attestd-io/attestd-mcp

MCP server Claude CodeCodexCursor +2

CVE and supply chain checks for MCP clients. Covers infrastructure, PyPI, and npm packages. Runs locally from the @attestd/mcp npm package. Needs 2 environment variables to run.

not rated 0 2mo ago A tokens not measured original MIT

seal

2553

aurumflux20/seal

MCP server Claude CodeCodexCursor +2

Exactly-once admission for irreversible agent actions, world-confirmed settlement, and effect graphs with compensating seals — on a shared Postgres, with a tamper-evident certificate chain. Runs locally from the seal-kernel Python package.

not rated 0 6d ago A tokens not measured

agentvault

2554

bch1212/agentvault

MCP server Claude CodeCodexCursor +2

Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs. Runs locally from the agentvault-mcp npm package. Needs 2 environment variables to run.

not rated 0 3mo ago A tokens not measured original MIT

injectshield

2555

bch1212/injectshield

MCP server Claude CodeCodexCursor +2

Prompt-injection firewall for AI agents — scan untrusted text before LLM calls. Runs locally from the @injectshield/mcp npm package. Needs 2 environment variables to run.

not rated 0 3mo ago A tokens not measured original MIT

attestify-mcp

2556

attestifyagent/attestify-mcp

MCP server Claude CodeCodexCursor +2

MCP stdio server for Attestify OS — governed agent execution and Attestify Trust signed evidence. Runs locally from the attestify-mcp npm package. Needs 4 environment variables to run.

not rated 0 17d ago A tokens not measured

liquilens-evidence

2557

beepboop2025/liquilens-evidence-carrier

Skill Claude CodeCodex

Verify and rights-safely project LiquiLens Evidence Carrier, Fleet Brief, or Trade Safety Receipt JSON in local files. Use for provenance, clocks, integrity, redistribution, FDC3, OpenLineage, brief validation, or order-bound policy-receipt verification; not for collecting market data, trading, recommendations…

not rated 0 changed 10d ago A 79 tokens original Apache-2.0

blackdome

2558

blackdome-ai/blackdome-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

BlackDome MCP Server — AI agent access to live honeypot threat intelligence, attacker IPs, IOCs, and credential intel. Runs locally from the blackdome-mcp Python package. Needs 3 environment variables to run.

not rated 0 1mo ago A tokens not measured original MIT

shield

2559

bolyra/bolyra

MCP server Claude CodeCodexCursor +2

One of 4 in server.json

Stdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement. Runs locally from the @bolyra/shield npm package.

not rated 0 today A tokens not measured original Apache-2.0

bounded-tools-mcp

2560

bounded-systems/bounded-tools-mcp

MCP server Claude CodeCodexCursor +2

Read-only MCP server over bounded.tools's Sigstore-verified static API (stdio). Runs locally from the @bounded-systems/bounded-tools-mcp npm package. Needs 1 environment variable to run.

not rated 0 4d ago A tokens not measured original MIT

cipherhub

2561

bowenerchen/CipherHUB-MCP-Server

MCP server Claude CodeCodexCursor +2

Production-grade cryptography toolkit with 31 MCP tools for classical, PQC, and KMS workflows. Remote server at tools.cipherhub.cloud.

not rated 0 4mo ago A tokens not measured

aethereum

2562

br9704/aethereum

MCP server Claude CodeCodexCursor +2

The team layer for AI coding agents: shared contracts, collision alerts, E2EE sessions. Runs locally from the aethereum npm package.

not rated 0 3d ago A tokens not measured

legacy-mcp

2563

harsha-moparthy/legacy-mcp

MCP server Claude CodeCodexCursor +2

Active Directory MCP Server for AI-powered assessment. Runs locally from the legacy-mcp Python package.

not rated 0 1mo ago A tokens not measured

brunovicco/mcp-server-auth-template

MCP server Claude CodeCodexCursor +2

MCP server "mcp-server-auth-template" as configured in brunovicco/mcp-server-auth-template. Runs in Docker (ghcr.io/brunovicco/mcp-server-auth-template:v0.6.2). Needs 10 environment variables to run.

not rated 0 7d ago A tokens not measured original MIT

heimdall

2565

caglarbozkurt/mcp-heimdall

Skill Claude CodeCodex

Vet a Model Context Protocol (MCP) server for safety before installing or connecting it. Use when the user wants to check, audit, scan, or review an MCP server for prompt-injection, data-exfiltration, or malicious capabilities — given a directory, npm package, GitHub repo, or a tools/list JSON dump.

not rated 0 2mo ago A 71 tokens original MIT

sitehealth-mcp

2566

carsonroell-debug/sitehealth-mcp

MCP server Claude CodeCodexCursor +2

Full website health audit — SSL, DNS, DMARC/SPF/DKIM, performance, uptime, links. Runs locally from the sitehealth-mcp npm package.

not rated 0 4mo ago A tokens not measured

filewash

2567

cassilup/filewash-api

MCP server Claude CodeCodexCursor +2

Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal. Runs locally from the @fixpixel/filewash-api npm package.

not rated 0 3mo ago A tokens not measured original MIT

certindex-mcp

2568

certindex/certindex-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing CertIndex's Certificate Transparency search tools to any MCP-compatible client. Runs locally from the certindex-mcp Python package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: