25,252 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
DORA compliance scanner as an MCP server — scans projects for Digital Operational Resilience Act gaps. Runs locally from the mcp-dora Python package.
MCP server Claude CodeCodexCursor +2
Drop-in Google OAuth 2.0 authentication for MCP servers. Runs locally from the mcp-google-oauth Python package.
MCP server Claude CodeCodexCursor +2
MCP server "mitre-attack-mcp" as configured in CSOAI-ORG/mitre-attack-mcp. Runs locally from the mitre-attack-mcp Python package.
MCP server Claude CodeCodexCursor +2
Nanoseil Identity credential broker for remote MCP servers. Runs locally from the @nanoseil/nsid-mcp-auth npm package.
MCP server Claude CodeCodexCursor +2
MCP server for safe shell, file, database, git, and HTTP access. Every operation validated against per-agent permission rules. Powered by AgentsID. Runs locally from the @agentsid/guard npm package.
madebyshun/blueagent-x402-services
Skill Claude CodeCodex
Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
MCP server Claude CodeCodexCursor +2
MCP server for ctscout.dev — domain attribution via Certificate Transparency + multi-signal Pro enrichment. Runs locally from the ctscout-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
Active Directory MCP Server for AI-powered assessment. Runs locally from the legacy-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for auditing Terraform state files for security misconfigurations. Runs locally from the mcp-tfstate-reader Python package.
MCP server Claude CodeCodexCursor +2
Google SecOps MCP server (official alias for google-secops-mcp). Runs locally from the secops-mcp Python package.
MCP server Claude CodeCodexCursor +2
Model Context Protocol (MCP) server for the CVEFeed.io vulnerability intelligence API. Runs locally from the cvefeed-mcp Python package.
Katalinhorvath-blip/mcp-policy-interceptor
MCP server Claude CodeCodexCursor +2
A lightweight governance and policy interception layer for MCP servers. Runs locally from the mcp-policy-interceptor npm package.
Skill Claude CodeCodex
A security-testing guide for XXE, a flaw where an XML parser is tricked into reading files or making network requests. It covers XML inputs such as APIs, uploads, SOAP services, office documents, SVGs, and PDFs.
kkAlwaysAwaked/safety_fence_mcp
Skill Claude CodeCodex
A security boundary for OpenClaw that checks data before it leaves the local device. It allows safe data, can remove sensitive details when possible, and blocks dangerous secrets or data it cannot safely sanitize.
MCP server Claude CodeCodexCursor +2
MCP server "gobuster-mcp" as configured in schwarztim/sec-gobuster-mcp. Runs locally from the gobuster-mcp npm package.
MCP server Claude CodeCodexCursor +2
13 specialist AI agents for your coding assistant — security audits, test generation, infrastructure, and more. MCP-native for Claude Code, Codex, and any MCP-compatible client. Runs locally from the vending-machine-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server for AI security + AI governance + AI inventory + code security. Lets Claude, Cursor, Windsurf, Cline invoke cyscan (SAST/SCA/secrets — 1,815 rules / 75+ languages), cyweb (web vulnerability scanner), cyprobe (network discovery), cyradar (discov. Runs locally from the @cybrium-ai/mcp-server npm package.
finimpulse/mcp-server-typescript
Cursor rule Cursor
Prohibit reading or modifying .env secret files.
MCP server Claude CodeCodexCursor +2
MCP server "secure-comms" as configured in CSOAI-ORG/secure-comms. Runs locally from the @meok-ai-labs/secure-comms npm package.
MCP server Claude CodeCodexCursor +2
An industry-grade MCP gateway providing three capabilities: (1) secure workspace file sharing with HMAC-signed time-limited download links via Ngrok tunnel, (2) authenticated URL-to-workspace file downloads with MIME validation, and (3) load-balanced web. Runs locally from the openclaw-syncralis npm package.
Cursor rule Cursor
Nextjs security guardrails — 18 CVEs covered.
AiAgentKarl/enterprise-auth-mcp-server
MCP server Claude CodeCodexCursor +2
MCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, role-based access control. Runs locally from the enterprise-auth-mcp-server Python package.
MCP server Claude CodeCodexCursor +2
Model Context Protocol server that enforces deterministic policy on AI tool calls using the Vaikora policy engine. Runs locally from the vaikora-guard-mcp Python package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
MCP server "qualys-pci-mcp" as configured in RobotDisco/qualys-pci-mcp. Runs locally from the qualys-pci-mcp Python package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: