Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

mcp-server77

3313

veteranchat/mcp-server77

Skill Claude CodeCodex

Skill "mcp-server77" from veteranchat/mcp-server77, covering skill.md — practical examples & use cases, using the server, python example, check status and nmap scan.

not rated 0 2mo ago D 0 tokens original Apache-2.0

keycloak-mcp-server

3314

thebylito/keycloak-mcp-server

MCP server Claude CodeCodexCursor +2

A comprehensive Model Context Protocol server for Keycloak administration, providing 80+ tools to manage users, realms, clients, roles, groups, sessions, events, organizations, protocol mappers, user attributes, client scopes, and identity providers direc. Runs locally from the keycloak-mcp-server npm package.

not rated 0 2mo ago A tokens not measured copy · 100% MIT

mcp

3315

GlaserIngo/stript-mcp

MCP server Claude CodeCodexCursor +2

Stript MCP bridge. Anonymize documents with the local Stript app and restore AI answers without PII ever entering the chat. Runs locally from the @stript/mcp npm package.

not rated 0 2mo ago A tokens not measured original MIT

soc-siem-hunter

3316

JoaquinHernandez/soc-siem-mcp-

MCP server Claude CodeCodexCursor +2

MCP server "soc-siem-hunter" as configured in JoaquinHernandez/soc-siem-mcp. Runs src.server with python. Needs 5 environment variables to run.

not rated 0 1mo ago A tokens not measured original MIT

dfir-pcap-mcp

3317

Gentle-bae/dfir-pcap-mcp

MCP server Claude CodeCodexCursor +2

MCP server "dfir-pcap-mcp" as configured in Gentle-bae/dfir-pcap-mcp. Runs locally from the dfir-pcap-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

saglitzsecure

3318

HalidSaglam/saglitzsecure

Plugin Claude Code

Bundles 4 skills, 1 MCP server · 229 tokens together

Static security review for web, backend and Apple platform code: four skills that drive an evidence-first audit, plus the SaglitzSecure MCP server they call.

not rated 0 2mo ago A tokens not measured original MIT

agent-fables-preflight

3319

AaronVick/AGENT_FABLES

Skill Codex

Retrieve revision-pinned software-agent failure evidence and unresolved verification gates without authorizing execution. Use before destructive, irreversible, privileged, broad-scope, production, infrastructure, database, filesystem, permission, MCP configuration, or supply-chain operations; when reviewing a…

not rated 0 2mo ago A 79 tokens

critic-mcp

3321

layermedya/Critic-MCP

MCP server Claude CodeCodexCursor +2

A Model Context Protocol (MCP) server providing automated, read-only code review and vulnerability analysis using LLMs. Runs locally from the critic-mcp npm package.

not rated 0 2mo ago A tokens not measured original MIT

apivault

3322

TLB-STATION/apivault-mcp

Cursor rule Cursor

Integration rules and security practices for ApiVault MCP Server.

not rated 0 1mo ago A 213 tokens original MIT

mcp-tenant-isolation

3323

actions-marketplace-validations/subodhkc_mcp-tenant-isolation

MCP server Claude CodeCodexCursor +2

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration. Runs locally from the mcp-tenant-isolation npm package.

not rated 0 2mo ago A tokens not measured copy · 100% MIT

blue-team-host-audit

3324

Pusparaj99op/blackarch-AI

Skill Claude Code

Local host hardening audit — listening ports vs firewall, SUID/world-writable files, SSH config, and package integrity. No network target required.

not rated 0 2mo ago A 36 tokens original MIT

mcpaudit

3325

andreolf/mcp-audit

MCP server Claude CodeCodexCursor +2

npm audit for MCP servers — grade any MCP server A–F on auth, SSRF, static keys, and prompt-injection surface. Runs locally from the @andreolf/mcpaudit npm package.

not rated 0 2mo ago A tokens not measured original MIT

sophos-central-mcp

3326

atlan-it-masters/NC_sophos-central-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sophos-central-mcp" as configured in atlan-it-masters/NCsophos-central-mcp. Runs locally from the sophos-central-mcp npm package.

not rated 0 2mo ago A tokens not measured original MIT

senior-system-design

3327

badrabbitt/leanrigor

Skill Claude CodeCodex

Use when designing or reviewing a system, service, migration or cross-component feature — anything where load, failure, data shape, security boundaries or rollout matter. Produces a design with explicit non-functional requirements, capacity assumptions, failure modes, security boundaries, observability and a rollout…

not rated 0 changed 1mo ago A 62 tokens original Apache-2.0

rei-verify

3328

fc0web/rei-verify

MCP server Claude CodeCodexCursor +2

A locally run MCP server that wraps four verification building blocks: verdicts, incomplete markers, audit chains, and verified execution. The name and description indicate a focus on checking and recording whether work can be trusted.

not rated 0 2mo ago A tokens not measured

attack-path-analysis

3329

Cognisn/cloudledger

Skill Claude CodeCodex

Analyse plausible attack paths to compromise a scanned AWS account and explain them against the MITRE ATT&CK framework, using the CloudLedger server. Use when the user wants an attack-path analysis, threat modelling, MITRE ATT&CK mapping, adversary/red-team perspective, "how could this account be compromised", or the…

not rated 0 2mo ago A 88 tokens original MIT

kurd

3330

sn391/kurd

MCP server Claude CodeCodexCursor +2

Enterprise Model Context Protocol gateway with multi-tenancy, billing, RBAC, DLQ, idempotency, and secrets management. Runs locally from the kurd Python package.

not rated 0 1mo ago A tokens not measured original MIT

ssh-mcp-secure

3331

brianShih/ssh-mcp-secure

MCP server Claude CodeCodexCursor +2

MCP server "ssh-mcp-secure" as configured in brianShih/ssh-mcp-secure. Runs locally from the ssh-mcp-secure npm package.

not rated 0 2mo ago A tokens not measured original MIT

redhat-security-data

3332

dmc5179/redhat-security-data-api-mcp

Skill Claude CodeCodex

Query and investigate Red Hat security data (CVEs, CSAF advisories, OVAL streams) using the Red Hat Security Data API MCP server. Guides Claude through multi-step security investigation workflows.

not rated 0 2mo ago A 44 tokens original Apache-2.0

ssh-mcp-server

3333

perhamm/ssh-mcp-server

MCP server Claude CodeCodexCursor +2

SSH MCP server with guard profiles, sudo from the environment, knownhosts verification and tunnels. Runs locally from the @perhamm/ssh-mcp-server npm package.

not rated 0 2mo ago A tokens not measured

agentguard-mcp

3335

haisamar/agentguard-mcp

MCP server Claude CodeCodexCursor +2

A minimal-privilege proxy for MCP tool calls. Runs locally from the agentguard-mcp Python package.

not rated 0 today A tokens not measured

fortigate-mcp-server

3336

Serrinho02/fortigate-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "fortigate-mcp-server" as configured in Serrinho02/fortigate-mcp-server. Runs locally from the fortigate-mcp-server Python package.

not rated 0 2mo ago A tokens not measured copy · 100% MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: