27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-ai-detection" as configured in carminelau/mcp-ai-detection. Runs locally from the mcp-ai-detection Python package.
LorenzoLombardi111/factory-mcpvet
Skill Claude CodeCodex
Vet an MCP server, Claude Code skill, or plugin for unsafe behavior (shell execution, secret access, data exfiltration, prompt injection, remote code) BEFORE installing it. Use whenever the user is about to add/install an MCP server, skill, or plugin, asks "is this safe to install", or pastes a GitHub repo / npm…
MCP server Claude CodeCodexCursor +2
MCP server "security-tools" as configured in yeodh10/security-mcp. Launched with venv/Scripts/python.exe server.py.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-secrets-vault" as configured in gpitrella/mcp-secrets-vault. Runs locally from the @gpitrella/mcp-secrets-vault npm package.
natesilva/mcp-certificate-monitor
MCP server Claude CodeCodexCursor +2
A FastMCP server that lets an AI host monitor certificate expiry across a set of domains. Runs locally from the mcp-certificate-monitor Python package.
latent-defense/mcp-server-public
MCP server Claude CodeCodexCursor +2
MCP server "latent-defense-mcp" as configured in latent-defense/mcp-server-public. Runs locally from the latent-defense-mcp Python package.
Skill Codex
Configure or troubleshoot LimaCharlie MCP auth, Vault storage, JWT refresh, key rotation, and UID/OID issues.
Skill Claude CodeCodex
Triage files, hashes, URLs, and alerts with AssemblyLine 4 via the assemblyline-mcp server. Use when the user asks to analyze/triage a sample, investigate a hash or IOC, assess an AssemblyLine alert, or decide if something is malicious. Requires the assemblyline-mcp MCP server to be connected.
MCP server Claude CodeCodexCursor +2
Secure any MCP server with Bloom Identity - tool-level permissions and audit logging. Runs locally from the bloom-mcp npm package.
TopskiyPavelQwertyGang/mcp-secure-agents
MCP server Claude CodeCodexCursor +2
MCP server "mcp-secure-agents" as configured in TopskiyPavelQwertyGang/mcp-secure-agents. Runs locally from the mcp-secure-agents Python package.
Skill Claude CodeCodex
Use this skill when the user asks about dependencies, package upgrades, vulnerabilities, blast radius, or software supply chain security.
MCP server Claude CodeCodexCursor +2
A local security proxy MCP server for Neon's serverless Postgres API — default-deny, policy-enforced AI branch access. Runs locally from the neon-guard-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-supply-guard" as configured in wwb-bill/mcp-supply-guard. Runs locally from the mcp-supply-guard Python package.
MCP server Claude CodeCodexCursor +2
MCP server for Keycloak administration. Runs locally from the mcp-keycloak Python package.
MCP server Claude CodeCodexCursor +2
AgentShield MCP server — real-time smart contract security for AI agents. Verify contracts for honeypots, rug pulls, and risks via x402 micropayments. Runs locally from the agentshield-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server for developer workflow automation — smart commits, secret scanning, PR descriptions, and more. Runs locally from the devnarrate Python package.
a2a-settlement/mcp-trust-gateway
MCP server Claude CodeCodexCursor +2
Trust verification gateway for MCP — policy enforcement, approval workflows, and audit logging for agent-tool connections. Runs locally from the mcp-trust-gateway Python package.
codezerowork/mcp-oauth2-token-provider
MCP server Claude CodeCodexCursor +2
MCP server "mcp-oauth2-token-provider" as configured in codezerowork/mcp-oauth2-token-provider. Runs locally from the mcp-oauth2-token-provider npm package.
MCP server Claude CodeCodexCursor +2
MCP server "mimikatz-mcp" as configured in schwarztim/sec-mimikatz-mcp. Runs locally from the mimikatz-mcp npm package.
lobster-kit/mcp-server-lobstervault
Skill Claude CodeCodex
Encrypted secret storage for AI agents. Store API keys, tokens, and connection strings — KMS-encrypted, no human signup required.
MCP server Claude CodeCodexCursor +2
MCP server "gopass-mcp" as configured in inavhq/gopass-mcp. Runs locally from the gopass-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server for WorkOS User Management API. Runs locally from the @tellahq/workos-mcp npm package.
SaeidSec/Malware-Analysis-MCP-Server
MCP server Claude CodeCodexCursor +2
MCP server "malware-analysis-mcp" as configured in SaeidSec/Malware-Analysis-MCP-Server. Runs locally from the malware-analysis-mcp npm package.
Skill Claude CodeCodex
Use this skill when the user asks to document or audit an authorized Android APK with apk-docforge.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: