Security

25,252 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

isitdisposable-mcp

2689

richelo/isitdisposable-mcp

MCP server Claude CodeCodexCursor +2

An MCP server that lets AI agents check whether an email address or domain is disposable. Runs locally from the isitdisposable-mcp npm package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

alertlogic-mcp

2690

rijul170/alertlogic-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows. Runs locally from the alertlogic-mcp Python package.

not rated 0 1mo ago A tokens not measured original MIT

falcon-mcp

2691

rijul170/falcon-mcp

MCP server Claude CodeCodexCursor +2

Community extension of CrowdStrike's falcon-mcp MCP server with full Falcon API coverage (1,296 tools). Runs locally from the falcon-mcp-extended Python package.

not rated 0 13d ago A tokens not measured original MIT

qualys-consulting

2692

rijul170/qualys-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "qualys-consulting", hosted remotely at localhost, as configured in rijul170/qualys-mcp.

not rated 0 2mo ago A tokens not measured original MIT

sophos-central-mcp

2693

rijul170/sophos-central-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops. Runs locally from the @rijul170/sophos-mcp npm package.

not rated 0 1mo ago A tokens not measured original MIT

prompt-compass

2694

rishabhmpc/prompt-compass-mcp

MCP server Claude CodeCodexCursor +2

Decision-only prompt routing and firewall checks for local/cloud routing, PII and jailbreak risk. Runs locally from the @mpcfintech/prompt-compass-mcp npm package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured

osint-mcp

2695

rjn32s/osint-mcp

MCP server Claude CodeCodexCursor +2

26 free OSINT tools as MCP tools for AI agents — one command installs everything. Runs locally from the osint-mcp Python package. Needs 5 environment variables to run.

not rated 0 2mo ago A tokens not measured original MIT

rnwy

2696

rnwy/mcp

Skill Claude CodeCodex

RNWY trust intelligence for AI agents. Use when querying trust scores, interpreting sybil data, analyzing reviewer wallets, comparing agents, or assessing transaction risk. Trigger phrases: "trust score", "sybil", "reviewer analysis", "wallet age", "trust check", "risk tier", "attestation", "reviewer wallet", "compare…

not rated 0 5mo ago A 97 tokens

mcp-trust

2697

saagpatel/mcp-trust

MCP server Claude CodeCodexCursor +2

A neutral public trust registry for MCP servers — check before you connect. Runs locally from the mcp-trust Python package.

not rated 0 4d ago A tokens not measured original MIT

bug-bounty-hunting

2698

rozetyp/vuln-intel-mcp

Skill Claude CodeCodex

Hunt vulnerabilities like an expert, not a linear software engineer: come at a target from the overlooked angle, reason by analogy and transfer proven attack mechanisms, attack the hidden assumptions and the seams between systems, drill to the mechanism, then keep it honest with proof and persistence (acceptance !=…

not rated 0 1mo ago A 263 tokens

ensmcp

2699

seifreed/ensmcp

MCP server Claude CodeCodexCursor +2

Servidor MCP con las medidas de seguridad del ENS (Anexo II del RD 311/2022): matriz de aplicabilidad y checklist de auditoría, sin conexión. Runs locally from the ensmcp Python package.

not rated 0 2d ago A tokens not measured original MIT

mcp

2700

shieldly-io/mcp

MCP server Claude CodeCodexCursor +2

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation. Runs locally from the @shieldly/mcp npm package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

cloudarmor-mcp

2701

shigechika/cloudarmor-mcp

Plugin Claude Code

Bundles 1 MCP server

Google Cloud Armor WAF log patrol for Claude Code, straight from Cloud Logging. Summarize enforced DENYs per rule, flag home-region false positives, review preview (dry-run) rules, and get a one-shot dailybrief health check. All tools are read-only. Requires CLOUDARMORPROJECT and a GOOGLEAPPLICATIONCREDENTIALS serv.

not rated 0 17d ago A tokens not measured original MIT

entraadm-mcp

2702

shigechika/entraadm-mcp

Plugin Claude Code

Bundles 1 MCP server

Microsoft Entra ID sign-in and audit-log triage MCP for Claude Code. Investigate why a sign-in failed (AADSTS-annotated), tenant-wide failure trends and password-spray suspects, who changed what in the directory, and whether MFA is registered for an account, plus a one-shot dailybrief. Read-only — no write calls anywh.

not rated 0 21d ago A tokens not measured original MIT

gwsadm-mcp

2703

shigechika/gwsadm-mcp

Plugin Claude Code

Bundles 1 MCP server

Google Workspace security-audit MCP for Claude Code, through a service account with domain-wide delegation. Investigate suspicious/disabled logins, suspended accounts, third-party OAuth grants, Drive external sharing, group delivery policy, and Gmail message tracing across one or more Workspace domains, plus a…

not rated 0 11d ago A tokens not measured original MIT

keycloak-mcp

2704

shigechika/keycloak-mcp

Plugin Claude Code

Bundles 1 MCP server

KeyCloak Admin REST API for Claude Code, through a Service Account. Investigate accounts, group membership, sessions, MFA enrolment, brute-force lockouts, and login/admin events, and get a one-shot dailybrief health check. Runs read-only unless the Service Account is granted manage-users. Requires KEYCLOAKURL, KEYCLO.

not rated 0 4d ago A tokens not measured original MIT

cyberlens-mcp-server

2705

shadoprizm/cyberlens-mcp-server

MCP server Claude CodeCodexCursor +2

Security scanning for websites, public repositories, and Open CLAW skills. Runs locally from the @shadoprizm/cyberlens-mcp-server npm package. Needs 2 environment variables to run.

not rated 0 2d ago A tokens not measured original MIT

smartpolicy

2706

smartpolicy-protocol/smartpolicy

MCP server Claude CodeCodexCursor +2

Runtime authorization for AI agents and smart contracts via an immutable on-chain policy registry. Runs locally from the @smartpolicy/mcp npm package. Needs 4 environment variables to run.

not rated 0 2mo ago A tokens not measured original Apache-2.0

vibelogin-mcp

2707

vibelogin/mcp

MCP server Claude CodeCodexCursor +2

Add authentication to your app without leaving your IDE. Runs locally from the @vibelogin/mcp npm package.

not rated 0 5mo ago A tokens not measured

agentoolbox

2708

solhammer/agentoolbox

Cursor rule Cursor

Agent Toolbox pre-action firewall — gate shell commands and outbound URLs before execution.

not rated 0 1mo ago A ✓ AI review 691 tokens original MIT

mcp-shield

2709

sophiacave/mcp-shield

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F. Runs locally from the @sophiacave/mcp-shield npm package.

not rated 0 3mo ago A tokens not measured

sigma-gate

2710

spektre-labs/sigma-gate

MCP server Claude CodeCodexCursor +2

Deterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call. Remote server at sigma-gate-864996675261.us-central1.run.app.

not rated 0 2mo ago A tokens not measured original Apache-2.0

humsana-mcp

2711

sriramnatrajhen/humsana-mcp

MCP server Claude CodeCodexCursor +2

Detect developer stress, focus, fatigue from typing. Block dangerous commands when tired. Runs locally from the @humsana/mcp-server npm package.

not rated 0 1mo ago A tokens not measured

hive-mcp-agent-kyc

2712

srotzin/hive-mcp-agent-kyc

MCP server Claude CodeCodexCursor +2

KYA agent identity verification and trust scoring for autonomous A2A networks. Remote server at hive-mcp-agent-kyc.onrender.com.

not rated 0 4mo ago A tokens not measured original MIT