25,252 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
utrawal9185-cmd/darknet-mcp-server
MCP server Claude CodeCodexCursor +2
Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis. Runs locally from the darknet-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-guardrails-kit" as configured in tcharod/mcp-guardrails-kit. Runs locally from the mcp-guardrails-kit Python package.
MCP server Claude CodeCodexCursor +2
Trust-scan gate for MCP servers: evidence-backed verdicts (SAFE/REVIEW/DONOTINSTALL) before you install. Runs locally from the mcp-vetting Python package.
MCP server Claude CodeCodexCursor +2
TypeScript SDK for Nexus MCP — HMAC middleware, server factory, and manifest generation. Runs locally from the @wazobiatech/nexus-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "fortianalyzer-mcp" as configured in forticrevs/fortianalyzer-mcp. Runs locally from the fortianalyzer-mcp Python package.
Skill Claude CodeCodex
Security QA tester workflow for the owasp-wstg MCP server — scope, search, neighbor-walk, and citation over the WSTG corpus using five MCP tools. Load this file first; then load the model-variant file that matches your model family.
MCP server Claude CodeCodexCursor +2
A drop-in approval gate and audit trail for AI agents -- works with LangGraph, or with no framework at all. Runs locally from the approval-gate Python package.
MCP server Claude CodeCodexCursor +2
MCP Server for enterprise SDLC code integrity: lifecycle teardown parity, mock theater detection, DRY violations, and safety checks for shell, JS, and Python. Runs locally from the @asobacloud/sdlc-integrity-mcp npm package.
MCP server Claude CodeCodexCursor +2
Executable policy engine for coding agents: gate what touches your repo (paths, contents, commands), not just tool names. MCP server + CLI + hooks. Runs locally from the @darkm3tter/repo-guard npm package.
securityscan-api/securityscan-mcp
MCP server Claude CodeCodexCursor +2
Unified MCP server — give your AI agent the ability to secure its own environment. Runs locally from the securityscan-mcp Python package.
RafaDiazRios/pentest-mcp-extended
MCP server Claude CodeCodexCursor +2
MCP server "pentest-extended", hosted remotely at localhost, as configured in RafaDiazRios/pentest-mcp-extended.
MCP server Claude CodeCodexCursor +2
MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning. Runs locally from the offsec-mcp Python package. Needs 2 environment variables to run.
Skill Claude CodeCodex
A set of tools for replaying and capturing Yakit traffic. Yakit is a security-testing tool that can resend network requests and capture the results.
MCP server Claude CodeCodexCursor +2
Governs any stdio MCP server by interposing on tools/call. Fails closed. Runs locally from the agentomy-mcp-gateway npm package.
Skill Claude CodeCodex
A code-review workflow written in Chinese that checks software changes for correctness, security, performance, and maintainability. It also defines a report format for critical issues and suggestions.
Cursor rule Cursor
Quality harness for MCP NetSuite practice — layers, RBAC, secrets, tests.
MCP server Claude CodeCodexCursor +2
Reverse and bind shell automation framework with MCP server. Runs locally from the pwncat-mcp Python package.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 75 tokens together
Read-only Claude tools to search a BloodHound (CE) Active Directory extract: Kerberoasting, AS-REP, DCSync, delegation, ACL abuse, and attack paths to Domain Admins / tier-0.
MCP server Claude CodeCodexCursor +2
Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP. Runs locally from the bunkervm Python package.
wildfirebill-ai/git-org-group-cred-vault
MCP server Claude CodeCodexCursor +2
MCP server "git-org-group-cred-vault" as configured in wildfirebill-ai/git-org-group-cred-vault. Runs locally from the git-org-group-cred-vault npm package.
Spuddy10345/mcp-policy-gateway
MCP server Claude CodeCodexCursor +2
An authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log. Runs locally from the mcp-policy-gateway Python package.
blackhole8080-darkmatter/urlscan-mcp
MCP server Claude CodeCodexCursor +2
MCP server "urlscan-mcp" as configured in blackhole8080-darkmatter/urlscan-mcp. Runs locally from the urlscan-mcp Python package.
samihalawa/linkedin-godmode-plugin
Skill Codex
Apply security, read-only, authorization, and same-layer verification rules to agent-operated LinkedIn workflows. Use before account-visible changes, private request replay, broad captures, or provider AI tasks.
mustafadeel/auth0-whoami-mcp-template
Skill Claude CodeCodex
Fork, customize, deploy, or troubleshoot the Auth0 Who Am I MCP template as an Auth0 Custom Extension. Use when adapting this repository's MCP tools, publishing its generated Webtask artifacts, provisioning its Auth0 API resource server, promoting a domain-level connection, registering an MCP client, or connecting an…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: