27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify. Remote server at trust-gate-mcp.onrender.com.
CallMarcus/security-scorecard-mcp
MCP server Claude CodeCodexCursor +2
Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial). Runs locally from the @callmarcus/securityscorecard-mcp npm package. Needs 2 environment variables to run.
Plugin Claude Code
Audit MCP servers against the OWASP MCP Top 10. Bundles the mcp-scan MCP server so Claude can scan any MCP server (stdio or HTTP) and get a graded A-F report before you trust it.
Skill Claude CodeCodex
Use when a user wants to take METTLE reverse-CAPTCHA screening challenges, obtain a signed badge or VCP credential, or check one.
CryptoAPIs-io/cryptoapis-mcp-aml
MCP server Claude CodeCodexCursor +2
MCP server for AML address verification and transaction screening via Crypto APIs. Runs locally from the @cryptoapis-io/mcp-aml npm package. Needs 1 environment variable to run.
Devrajsinh-Jhala/NPM-Vibe-check
Skill Codex
Run read-only npm package safety preflights through MCP or the CLI before an agent installs, adds, executes, or recommends unfamiliar registry packages. Use for npx or npm exec commands, dependency additions, package-lock changes, and project dependency reviews.
MCP server Claude CodeCodexCursor +2
Verify before your agent acts on data it paid for. Signed verdicts, checkable offline, via x402. Remote server at scrapecheck-mcp.fly.dev.
MCP server Claude CodeCodexCursor +2
FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality. Runs locally from the @finishkit/mcp npm package. Needs 1 environment variable to run.
Skill Claude CodeCodex
RETIRED, do not use. This skill called the token-intel-x402 API, which has been offline since October 2026 and no longer takes requests or payments. Kept only as a record; the source code is at https://github.com/Echolonius/token-intel-x402.
ExposureGuard/exposureguard-mcp
MCP server Claude CodeCodexCursor +2
MCP server for ExposureGuard domain security scanning API. Runs locally from the exposureguard-mcp Python package.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 43 tokens together
CVE lookup with exploit-probability (EPSS) + CISA KEV, IP/domain threat reputation, and daily threat briefs from the FoundryNet Data Network.
MCP server Claude CodeCodexCursor +2
GitHub project health, package dependency risk, trending repos, license & package comparison. Remote server at oss-intel-mcp-production.up.railway.app.
MCP server Claude CodeCodexCursor +2
Verified dependency audit as an MCP tool: a checked-against-the-installed-version verdict any AI agent can call, not a raw scan. Runs locally from the closeread-verify Python package.
MCP server Claude CodeCodexCursor +2
CheckMCP — vendor-neutral quality/security/context-cost audit & score for any MCP server. Runs locally from the audit-mcp Python package.
MCP server Claude CodeCodexCursor +2
Audits MCP configs, scores risk, and creates reversible repair plans. Runs locally from the @inferensys/dr-mcp npm package.
Integrity-Os/deliverability-doctor
MCP server Claude CodeCodexCursor +2
Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless. Remote server at deliverability-doctor.deliverability-doctor.workers.dev.
eren-solutions/agent-guardrail
MCP server Claude CodeCodexCursor +2
Action-level governance for AI agents -- control what they DO, not what they SAY. Runs locally from the agent-guardrail Python package.
MCP server Claude CodeCodexCursor +2
MCP server that reads C2PA Content Credentials: what an image declares about its own origin, and whether that declaration still verifies. Runs locally from the is-it-ai-mcp Python package.
MCP server Claude CodeCodexCursor +2
Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging. Runs locally from the @clavisagent/mcp-server npm package.
MCP server Claude CodeCodexCursor +2
MCP server for running sudo commands with encrypted password storage. Part of likezara™ MCP suite. Runs locally from the mcp-sudo Python package.
MCP server Claude CodeCodexCursor +2
MCP server "agent-guard-mcp" as configured in Kavachh/agent-guard-mcp. Launched with https://github.com/Kavachh/agent-guard-mcp/releases/download/v0.2.0/agent-guard-.
MCP server Claude CodeCodexCursor +2
Tamper-evident proof creation and verification for AI agents via MCP, A2A, and REST. Remote server at accordtrace.notary-labs.workers.dev.
MCP server Claude CodeCodexCursor +2
Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network. Runs locally from the tripwire-guard npm package.
MCP server Claude CodeCodexCursor +2
Phone carrier lookup, append, verification, DNC, and fraud data services. Remote server at mcp.data247.com.