Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

scry

2545

TunnelMind/scry-mcp

MCP server Claude CodeCodexCursor +2

Free IPv4 lookups against a distributed attacker-observation corpus. Remote server at mcp.tunnelmind.ai.

not rated 0 5mo ago A tokens not measured archived

vantic

2546

vanticlabs/vantic

MCP server Claude CodeCodexCursor +2

Verify an AI agent's payment authority: signed mandates, allowlists, and tamper-proof receipts. Runs locally from the @vantic/sdk npm package.

not rated 0 3mo ago A tokens not measured original Apache-2.0

webhook-co/webhook

Skill Codex

Diagnose why an inbound webhook signature fails to verify, and write correct verification code for a named provider. Use when a signature check rejects real traffic, when a webhook works in a provider's test console but not against your server, or when you are implementing verification for Stripe, GitHub, Shopify…

not rated 0 28d ago A 112 tokens original Apache-2.0 archived

blackwall

2549

bluetieroperations-create/blackwall-mcp

MCP server Claude CodeCodexCursor +2

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email). Runs locally from the blackwall-mcp npm package. Needs 2 environment variables to run.

not rated 0 6d ago A tokens not measured original MIT

bynn

2550

Bynn-Intelligence/skills

Plugin Claude Code

Bundles 10 skills · 979 tokens together

Document fraud detection for manipulated, fake and AI-generated PDF and image documents, plus identity verification and KYC sessions, age verification, content moderation, face search, AutoDoc invitations, and webhook verification. Bundles the Bynn MCP server.

not rated 0 changed 19d ago A tokens not measured original MIT

a2aidentitytoll-mcp

2551

clauxel/a2a-identity-toll-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for A2A caller identity, scope policy, verdict receipts, and audit history. Remote server at a2aidentitytoll.clauxel.com.

not rated 0 5mo ago A tokens not measured original MIT

bumblebeereceipt-mcp

2553

clauxel/bumblebee-endpoint-receipt-mcp

MCP server Claude CodeCodexCursor +2

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs. Remote server at bumblebeereceipt.clauxel.com.

not rated 0 5mo ago A tokens not measured

clauxel/copilot-cli-switch-gate-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for Copilot CLI switch gate MCP, structured receipts, audit logs, and reviewer-ready evid. Remote server at copilotcliswitchgate.clauxel.com.

not rated 0 5mo ago A tokens not measured original MIT

mcpoauthscopegate-mcp

2556

clauxel/mcp-oauth-scope-gate-mcp

MCP server Claude CodeCodexCursor +2

OAuth scope approvals and consent receipts for remote MCP servers. Remote server at mcpoauthscopegate.clauxel.com.

not rated 0 5mo ago A tokens not measured

mcpscopeconsent-mcp

2557

clauxel/mcp-scope-consent-mcp

MCP server Claude CodeCodexCursor +2

Remote MCP for MCP consent scope receipt, structured receipts, audit logs, and reviewer-ready eviden. Remote server at mcpscopeconsent.clauxel.com.

not rated 0 5mo ago A tokens not measured original MIT

safetyreplay-mcp

2558

clauxel/safety-replay-gate-mcp

MCP server Claude CodeCodexCursor +2

Paid remote MCP for safety replays, policy gates, eval receipts, and release evidence. Remote server at safetyreplay.clauxel.com.

not rated 0 5mo ago A tokens not measured

tracepiishield-mcp

2559

clauxel/tracepii-shield-mcp

MCP server Claude CodeCodexCursor +2

PII scanning and redaction receipts for LLM traces and tool payloads. Remote server at tracepiishield.clauxel.com.

not rated 0 5mo ago A tokens not measured

settlement-witness

2560

nutstrut/default-settlement-verifier

Skill Claude CodeCodex

Verify signed SAR v0.1 settlement receipts locally with Ed25519 and RFC 8785 canonicalization. Use when you need to confirm a receipt is cryptographically valid before trusting a task-complete claim, chaining to another agent output, using a receipt as evidence, or acting on a settlement-adjacent claim. Optionally…

not rated 0 1mo ago A 81 tokens original MIT

demipass

2561

bildow/demipass

MCP server Claude CodeCodexCursor +2

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context. Runs locally from the demipass npm package. Needs 2 environment variables to run.

not rated 0 yesterday A tokens not measured

crypto-safety

2562

zvmzaretsky/crypto-safety-mcp

MCP server Claude CodeCodexCursor +2

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans. Remote server at safe.fabtally.com.

not rated 0 3mo ago A tokens not measured original MIT

verify

2563

keyhalve/keyhalve-mcp

MCP server Claude CodeCodexCursor +2

Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys. Runs locally from the @keyhalve/verify-mcp npm package.

not rated 0 4d ago A tokens not measured original MIT

trust-api

2564

LayerCall/layercall-sdk

MCP server Claude CodeCodexCursor +2

Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it. Remote server at www.layercall.com.

not rated 0 2d ago A tokens not measured original MIT

linebreak-gate

2565

Baktun-Studio/linebreak-gate

MCP server Claude CodeCodexCursor +2

LineBreak security gate at the git/CI boundary: dependency CVE scan + AI SAST, human-approved overrides, git-native audit records. Runs locally from the linebreak-gate Python package.

not rated 0 1mo ago A tokens not measured original Apache-2.0

odgs-mcp-server

2566

MetricProvenance/odgs-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server for ODGS governance enforcement — validate data, compile regulations, generate S-Certs, detect drift. Runs locally from the odgs-mcp-server Python package. Needs 2 environment variables to run.

not rated 0 17d ago A tokens not measured

holster

2567

nauta-ai/holster

Plugin Claude Code

Bundles 1 skill · 54 tokens together

Preflight security for AI-agent development. Run holster guard . to get a RUN verdict and a SHARE verdict on a repo before you hand it to an AI agent, commit it, or share it — catches live API keys, MCP servers that run unpinned code, and credential files missing from .gitignore. Local-first; the repo never leaves yo.

not rated 0 5mo ago A tokens not measured original MIT

agts-mcp

2568

ObligationSign/agts-mcp

MCP server Claude CodeCodexCursor +2

Sovereign MCP Gateway — 64 governed tools with Merkle transparency log. EU AI Act ready. Remote server at mcp.obligationsign.com.

not rated 0 5mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: