25,252 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
BACH-AI-Tools/bachai-subdomain-finder3
MCP server Claude CodeCodexCursor +2
MCP server for accessing Subdomain Finder3 API. Runs locally from the bach-subdomain_finder3 Python package.
Plugin Claude Code
Secure secrets management for Claude Code - inject secrets into CLI commands with user approval.
MCP server Claude CodeCodexCursor +2
MCP server "cve-risk-mcp" as configured in sarveshkapre/cve-risk-mcp. Runs locally from the cve-risk-mcp Python package.
Plugin Claude Code
AI-powered security audit with real-time CWE data and npm audit.
JesusDavidQuarksoft/MCP_Security
MCP server Claude CodeCodexCursor +2
MCP server "devsecops-mcp-server" as configured in JesusDavidQuarksoft/MCPSecurity. Runs locally from the devsecops-mcp-server npm package.
Cursor rule Cursor
USE ALWAYS to prevent accidental exposure of secrets, credentials, and sensitive data in code or version control.
MCP server Claude CodeCodexCursor +2
MCP server "veracode-mcp" as configured in landscapedotcl/mcp-veracode. Runs locally from the veracode-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP Server for SonarQube - allows AI assistants to query bugs, vulnerabilities, code smells, security hotspots and more. Runs locally from the sonarqube-mcp-server Python package.
MCP server Claude CodeCodexCursor +2
MCP server for CloakLLM — PII cloaking tools for Claude Desktop. Runs locally from the cloakllm-mcp Python package.
sesopenko/mcp-filesystem-readonly
MCP server Claude CodeCodexCursor +2
CLI tools for MCP (Model Context Protocol) server setup and management with OIDC support (Auth0, Dex, Keycloak). Runs locally from the mcp-base Python package.
MCP server Claude CodeCodexCursor +2
MCP server "sqli-mcp" as configured in vivashu27/SQLinjectorMCP. Runs locally from the sqli-mcp Python package.
OpalDecisionSciences/openai-token-manager-mcp
MCP server Claude CodeCodexCursor +2
MCP server "openai-token-manager-mcp" as configured in OpalDecisionSciences/openai-token-manager-mcp. Runs locally from the openai-token-manager-mcp Python package.
MCP server Claude CodeCodexCursor +2
Testing package used for research. On explicit opt-in, sends your git/GitHub email, username, and hostname to the maintainer's research endpoint (see README). Runs locally from the memory-engine-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "okta-workspace-mcp" as configured in oreneHack/oktamcp. Runs locally from the okta-workspace-mcp npm package. Needs 9 environment variables to run.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-trust-layer" as configured in pst291291/mcp-trust-layer. Runs locally from the mcp-trust-layer Python package.
MCP server Claude CodeCodexCursor +2
AI-powered penetration testing. Launch scans, review findings, download reports. Runs locally from the @turbopentest/mcp-server npm package. Needs 2 environment variables to run.
attestedintelligence/aga-mcp-server
MCP server Claude CodeCodexCursor +2
MCP governance proxy and evidence engine for AI agent tool calls: evaluate each call against a sealed policy, permit or deny it at the proxy boundary, and prove every decision with signed, offline-verifiable evidence bundles. Runs locally from the @attested-intelligence/aga-mcp-server npm package.
Seiya-wasabi/mcp-server-security-snapshot
MCP server Claude CodeCodexCursor +2
MCP server for Website Security Snapshot API — scan HTTP security headers from Claude and AI agents. Runs locally from the mcp-server-security-snapshot npm package.
Plugin Claude Code
Bundles 2 skills, 1 command, 1 agent · 281 tokens together
Local-beta Invompt onboarding and invoice workflows. Select Guest or OAuth in the current conversation before configuring MCP.
Plugin Claude Code
Least-privilege credential injection for CLI tools and MCP servers. Intercepts Bash tool calls and MCP tool calls, swapping in the least-privileged auth token for each operation based on .claude/downscoping.yaml config.
MCP server Claude CodeCodexCursor +2
Hardened SSH MCP server for VS Code / Copilot Chat — run policy-scoped commands on remote hosts via natural language. Runs locally from the ssh-mcp-server-copilot Python package.
MCP server Claude CodeCodexCursor +2
MCP server for interacting with APVISO penetration testing platform. Runs locally from the @apviso/mcp npm package.
Cursor rule Cursor
Ambit.IQ ecosystem — MCP, GRC, deploy, and secrets.
Skill Claude CodeCodex
Verify the health of a skill's external dependencies before installing. Checks uptime, SSL, domain reputation, and blacklists. Returns a trust score and a clear install/block verdict.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: