Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

sentinel-mcp

3169

zach-abraham/sentinel-mcp

MCP server Claude CodeCodexCursor +2

SENTINEL MCP server — pre-execution transaction safety oracle for AI agents, paid autonomously via x402 on Base. Runs locally from the sentinel-mcp Python package.

not rated 0 8mo ago A tokens not measured copy · 100% MIT

mcp-policy-gateway

3170

ahmed2qaid/mcp-policy-gateway

MCP server Claude CodeCodexCursor +2

An authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log. Runs locally from the mcp-policy-gateway Python package.

not rated 0 2mo ago A tokens not measured

metsuke

3171

plenoai/metsuke

Skill Claude CodeCodex

Instructions for checking software-development compliance across pull requests, releases, and repositories. Compliance means testing whether work follows a chosen set of rules, such as SOC 2 or SLSA.

not rated 0 1mo ago A 59 tokens original MIT archived

agentverus-scanner-mcp

3172

agentverus/mcp-server

MCP server Claude CodeCodexCursor +2

MCP server wrapper for AgentVerus Scanner (scan SKILL.md via MCP tools). Runs locally from the agentverus-scanner-mcp npm package.

not rated 0 7mo ago A tokens not measured original MIT

smishing-stop-mcp

3173

jeongmk522-netizen/smishing-stop-mcp

MCP server Claude CodeCodexCursor +2

MCP server "smishing-stop-mcp" as configured in jeongmk522-netizen/smishing-stop-mcp. Runs locally from the smishing-stop-mcp npm package.

not rated 0 4mo ago A tokens not measured

securedblink

3174

paulushcgcj/securedblink

MCP server Claude CodeCodexCursor +2

MCP server for multi-database access with LLM permission gating. Runs locally from the securedblink Python package.

not rated 0 7d ago A tokens not measured GPL-3.0

specialist-review

3175

Eilodon/DPS-Superskills-MCP

Skill Claude CodeCodex

Use when completing tasks, implementing major features, or before merging — routes code review to the appropriate specialist lens (STRIDE, OWASP, ATAM, TEMPORAL, CPT, MIGRATION, PRIVACY/SECRETS) based on detected signals, with Independent Judge for Tier 3.

not rated 0 4mo ago A 64 tokens original Apache-2.0

aegis

3176

LlamaopNV/aegis

MCP server Claude CodeCodexCursor +2

Authentication library for aiohttp. Runs locally from the aegis Python package.

not rated 0 4mo ago A tokens not measured

phi-guard-mcp

3177

dcl632/phi-guard-mcp

MCP server Claude CodeCodexCursor +2

MCP server and CLI for detecting, redacting, and auditing PHI before medical text is sent to AI agents. Runs locally from the phi-guard-mcp Python package.

not rated 0 4mo ago A tokens not measured original MIT

mcp-server-yubikey

3178

dazaffino/mcp-server-yubikey

MCP server Claude CodeCodexCursor +2

MCP server that exposes YubiKey management tools to AI agents via the ykman CLI. Runs locally from the @ztechlab/mcp-server-yubikey npm package.

not rated 0 4mo ago A tokens not measured original MIT

mcp-server

3179

vengtoo/mcp-server

MCP server Claude CodeCodexCursor +2

Vengtoo MCP server — manage your authorization model and check access through any MCP-compatible AI tool. Runs locally from the @vengtoo/mcp-server npm package.

not rated 0 2mo ago A tokens not measured original MIT

tracehunt

3180

Hayatelin/tracehunt

Skill Claude CodeCodex

Find every account a username owns across 480+ platforms (OSINT username reconnaissance). Use when the user wants to investigate a handle, check someone's online footprint, verify an account, or do reconnaissance for AUTHORIZED security research. Returns the platforms where the handle exists plus a 0-100…

not rated 0 4mo ago A 66 tokens original MIT

grc-mcp-server

3181

jblanco384/op-mcp

MCP server Claude CodeCodexCursor +2

MCP server "grc-mcp-server" as configured in jblanco384/op-mcp. Runs locally from the grc-mcp-server Python package.

not rated 0 4mo ago A tokens not measured

encrypted-vault-mcp

3182

KhushalB25/encrypted-vault-mcp

MCP server Claude CodeCodexCursor +2

MCP server providing a local-first encrypted key-value vault. AES-GCM 256-bit cipher, PBKDF2-derived key from a user PIN. Stores secrets, API keys, notes, or any string data on disk. Zero cloud, zero telemetry, zero network — all data stays on the machine. Runs locally from the encrypted-vault-mcp npm package.

not rated 0 4mo ago A tokens not measured original MIT

levitate

3183

iomz/levitate

MCP server Claude CodeCodexCursor +2

Levitate is an exploit development platform. Runs locally from the levitate npm package.

not rated 0 17d ago A tokens not measured original MIT

sp-devcontrol

3184

PRojas01/SP-DevControl

Plugin Claude Code

Bundles 1 skill, 2 MCP servers · 59 tokens together

Gobernanza local para sesiones de código asistidas por IA: gates de autorización, aprobación de cambios, políticas de riesgo, compliance y rollback.

not rated 0 3mo ago A tokens not measured original MIT

phi-guard-mcp

3185

charlesree826/phi-guard-mcp

MCP server Claude CodeCodexCursor +2

MCP server and CLI for detecting, redacting, and auditing PHI before medical text is sent to AI agents. Runs locally from the phi-guard-mcp Python package.

not rated 0 4mo ago A tokens not measured copy · 100% MIT

auth0

3186

dsoziev1/deepseek-cli-day-16

MCP server Claude CodeCodexCursor +2

MCP server "auth0" as configured in dsoziev1/deepseek-cli-day-16. Runs /home/denis/deepseek-cli-day16/server.py with /usr/bin/python3.

not rated 0 4mo ago A tokens not measured archived

coff33ninja/ai-skills-mcp

Skill Claude CodeCodex

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not…

not rated 0 3mo ago A 73 tokens

auth0-user-monitor

3188

dsoziev1/deepseek-cli-day-18

MCP server Claude CodeCodexCursor +2

MCP server "auth0-user-monitor" as configured in dsoziev1/deepseek-cli-day-18. Runs /home/denis/deepseek-cli-day18/server.py with /usr/bin/python3.

not rated 0 4mo ago A tokens not measured archived

auth0-user-monitor

3189

dsoziev1/deepseek-cli-day-18-1

MCP server Claude CodeCodexCursor +2

MCP server "auth0-user-monitor" as configured in dsoziev1/deepseek-cli-day-18-1. Runs /home/denis/deepseek-cli-day18.1/server.py with /usr/bin/python3.

not rated 0 4mo ago A tokens not measured archived

correctover

3191

m8louist12-boop/mcp-server

MCP server Claude CodeCodexCursor +2

Legacy MCP security server — superseded by correctover-mcp-gateway for Claude Code, Cursor, Cline and Windsurf. Install the gateway instead; the runtime SDK is the correctover package. Runs locally from the correctover-mcp-server npm package.

not rated 0 25d ago A tokens not measured original Apache-2.0

mjendza/entra-id-permissions-mcp

Agent Claude Code

Lightweight variant of entra-sp-architect that needs NO Terraform MCP / Docker. Use when the user wants to create an Entra ID (Azure AD) service principal / app registration with a specific set of Microsoft Graph permissions expressed as Terraform, but does not have the Docker-based terraform MCP running. Resolves…

not rated 0 6d ago A 123 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: