Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

blackpoint-mcp

2689

WYRE-AI/blackpoint-mcp

MCP server Claude CodeCodexCursor +2

MCP server "blackpoint-mcp" as configured in WYRE-AI/blackpoint-mcp. Runs in Docker (ghcr.io/wyre-ai/blackpoint-mcp:v1.1.15). Needs 5 environment variables to run.

not rated 0 changed 1mo ago A tokens not measured original Apache-2.0

blumira-mcp

2690

WYRE-AI/blumira-mcp

MCP server Claude CodeCodexCursor +2

MCP server "blumira-mcp" as configured in WYRE-AI/blumira-mcp. Runs in Docker (ghcr.io/wyre-ai/blumira-mcp:v1.2.14). Needs 4 environment variables to run.

not rated 0 19d ago A tokens not measured

WYRE-AI/proofpoint-essentials-mcp

MCP server Claude CodeCodexCursor +2

MCP server "proofpoint-essentials-mcp" as configured in WYRE-AI/proofpoint-essentials-mcp. Runs in Docker (ghcr.io/wyre-ai/proofpoint-essentials-mcp:v1.0.0). Needs 6 environment variables to run.

not rated 0 15d ago A tokens not measured original Apache-2.0

rocketcyber-mcp

2692

WYRE-AI/rocketcyber-mcp

MCP server Claude CodeCodexCursor +2

MCP server "rocketcyber-mcp" as configured in WYRE-AI/rocketcyber-mcp. Runs in Docker (ghcr.io/wyre-ai/rocketcyber-mcp:v1.6.3). Needs 6 environment variables to run.

not rated 0 changed 12d ago A tokens not measured original Apache-2.0

sentinelone-mcp

2693

WYRE-AI/sentinelone-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sentinelone-mcp" as configured in WYRE-AI/sentinelone-mcp. Runs in Docker (ghcr.io/wyre-ai/sentinelone-mcp:v1.0.9). Needs 4 environment variables to run.

not rated 0 changed 6d ago A tokens not measured original Apache-2.0

proof-layer

2694

World-999-Labs/proof-layer

MCP server Claude CodeCodexCursor +2

Signed, hash-chained provenance receipts for AI agent actions. Runs locally from the @proof-layer/mcp npm package. Needs 3 environment variables to run.

not rated 0 6mo ago A tokens not measured original MIT

yotta-verify-mcp

2695

YottaMeta/yotta-verify-mcp

Skill Claude CodeCodex

A local security-scanning service for checking skills, plugins, and MCP servers before they are installed or used. MCP is a way for AI assistants to call external tools.

not rated 0 changed today A 218 tokens original MIT

zentric-protocol-mcp

2696

ZentricProtocol/zentricprotocol

MCP server Claude CodeCodexCursor +2

Prompt injection + PII detection for LLM apps and agent pipelines. Deterministic, sub-25ms. Runs locally from the zentric-protocol-mcp npm package.

not rated 0 5mo ago A tokens not measured

package-intel

2697

adam121393/package-intel

MCP server Claude CodeCodexCursor +2

MCP server giving coding agents npm, PyPI and crates.io package health, vulnerability, dependency-graph and download data. Free and zero-config; an optional wallet or a USDC transaction hash unlocks paid consolidated risk scores over x402. Runs locally from the package-intel-mcp npm package. Needs 4 environment…

not rated 0 2mo ago A tokens not measured original MIT

onchain-safety-mcp

2698

aitools420/onchain-safety-mcp

MCP server Claude CodeCodexCursor +2

Token-safety for AI agents: rug/honeypot verdict + score across PulseChain, Monad, Base & BSC. Runs locally from the @wickpics/onchain-safety-mcp npm package. Needs 1 environment variable to run.

not rated 0 4mo ago A tokens not measured original MIT

codasms-mcp

2699

ajemba/codasms-mcp

MCP server Claude CodeCodexCursor +2

Receive one-time SMS/OTP verification codes via the CODASMS API: get a number, wait, release. Runs locally from the codasms-mcp npm package. Needs 2 environment variables to run.

not rated 0 15d ago A tokens not measured original MIT

waqi

2700

ajprolific/waqi-mcp

MCP server Claude CodeCodexCursor +2

Redacts PII from your business tools before the AI sees them — with a provable audit log. Remote server at waqi.bilazann.com.

not rated 0 2mo ago A tokens not measured

hares

2701

alialrikabi313/hares

MCP server Claude CodeCodexCursor +2

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration). Runs locally from the @alihashim313/hares npm package.

not rated 0 2mo ago A tokens not measured original MIT

mcp-blast-radius

2702

aos-standard/mcp-blast-radius

MCP server Claude CodeCodexCursor +2

See what any MCP server can touch — static blast-radius report for every target; manifest optional for divergence detection. Runs locally from the mcp-blast-radius Python package.

not rated 0 3mo ago A tokens not measured original MIT

provenance-mcp

2703

apeirontrade/provenance-mcp

MCP server Claude CodeCodexCursor +2

Wash-traffic risk checks for Algorand x402 endpoints before your agent trusts or pays them. Runs locally from the provenance-mcp npm package. Needs 1 environment variable to run.

not rated 0 1mo ago A tokens not measured original MIT

attestd-mcp

2704

attestd-io/attestd-mcp

MCP server Claude CodeCodexCursor +2

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm). Runs locally from the @attestd/mcp npm package. Needs 2 environment variables to run.

not rated 0 1mo ago A tokens not measured original MIT

seal

2705

aurumflux20/seal

MCP server Claude CodeCodexCursor +2

Exactly-once admission for irreversible agent actions, world-confirmed settlement, and effect graphs with compensating seals — on a shared Postgres, with a tamper-evident certificate chain. Runs locally from the seal-kernel Python package.

not rated 0 2mo ago A tokens not measured

agentvault

2706

bch1212/agentvault

MCP server Claude CodeCodexCursor +2

Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs. Runs locally from the agentvault-mcp npm package. Needs 2 environment variables to run.

not rated 0 5mo ago A tokens not measured original MIT archived

attestify-mcp

2707

attestifyagent/attestify-mcp

MCP server Claude CodeCodexCursor +2

MCP stdio server for Attestify OS — governed agent execution and Attestify Trust signed evidence. Runs locally from the attestify-mcp npm package. Needs 4 environment variables to run.

not rated 0 2mo ago A tokens not measured

liquilens-evidence

2708

beepboop2025/liquilens-evidence-carrier

Skill Claude CodeCodex

Verify and rights-safely project LiquiLens Evidence Carrier, Fleet Brief, or Trade Safety Receipt JSON in local files. Use for provenance, clocks, integrity, redistribution, FDC3, OpenLineage, brief validation, or order-bound policy-receipt verification; not for collecting market data, trading, recommendations…

not rated 0 changed 2mo ago A 79 tokens original Apache-2.0

shield

2709

bolyra/bolyra

MCP server Claude CodeCodexCursor +2

One of 4 in server.json

Stdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement. Runs locally from the @bolyra/shield npm package.

not rated 0 5d ago A tokens not measured original Apache-2.0

bounded-tools-mcp

2710

bounded-systems/bounded-tools-mcp

MCP server Claude CodeCodexCursor +2

Read-only MCP server over bounded.tools's Sigstore-verified static API (stdio). Runs locally from the @bounded-systems/bounded-tools-mcp npm package. Needs 1 environment variable to run.

not rated 0 4d ago A tokens not measured original MIT

aethereum

2711

br9704/aethereum

MCP server Claude CodeCodexCursor +2

The team layer for AI coding agents: shared contracts, collision alerts, E2EE sessions. Runs locally from the aethereum npm package.

not rated 0 1mo ago A tokens not measured

legacy-mcp

2712

harsha-moparthy/legacy-mcp

MCP server Claude CodeCodexCursor +2

Active Directory MCP Server for AI-powered assessment. Runs locally from the legacy-mcp Python package.

not rated 0 3mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: