Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

guedder/mcp

Skill Claude CodeCodex

Como a autenticação Cognito do MCP Guedder liga e o que cada env var faz. Use ao configurar deploy autenticado, depurar 401 no MCP, ou decidir entre modo público e modo com token.

not rated 0 changed 1mo ago A 53 tokens

palisade

3506

palisadeemail/palisade-mcp

Skill Claude CodeCodex

Inspect and fix email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) with Palisade. When to use: a domain's mail is being rejected or spoofed, a DMARC record needs writing or moving to p=reject, DMARC reports need reading, or an IT team or MSP wants ongoing monitoring across many domains. Not for sending or…

not rated 0 1mo ago A 96 tokens original MIT

obsideo

3507

Regan-Milne/obsideo-mcp

Plugin Claude Code

Bundles 3 skills, 1 MCP server · 229 tokens together

Encrypted offsite object storage for your projects and your Claude Code setup, with possession proofs you can verify yourself. Free trial with no signup, 8 GB free with an email.

not rated 0 changed 5d ago A tokens not measured

pathguard

3508

Utee/pathguard-mcp

MCP server Claude CodeCodexCursor +2

Crypto transaction safety tool — screens addresses and transactions for scam risk. Remote server at pathguard-v2.up.railway.app.

not rated 0 2d ago A tokens not measured

agentkeychain

3509

linsipeng/agentkeychain

Skill Claude CodeCodex

Use when any task involves an API key, token, password, credential, cookie, private key, connection string, OAuth secret, or delegated access. Route credential storage and retrieval through AgentKeychain instead of chat, source files, logs, or repeated user prompts.

not rated 0 changed 1mo ago A 57 tokens original MIT

datakoot/security-intel-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. Remote server at security.datakoot.com.

not rated 0 15d ago A tokens not measured original MIT

bunny-mcp

3512

Digitizers/bunny-mcp

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 162 tokens together

Operate Bunny.net delivery from an agent — pull zones, DNS, storage, video streaming, edge scripting and Shield/WAF — read-only by default, with credentials stripped from every response.

not rated 0 13d ago A tokens not measured original MIT

governed-mcp-gateway

3513

Cubiczan/governed-mcp-gateway

MCP server Claude CodeCodexCursor +2

HTTP MCP gateway: principal on tools/call + SSE, allowlists, vault rotate, CHP gates. Runs locally from the @cubiczan/governed-mcp-gateway npm package.

not rated 0 1mo ago A tokens not measured copy · 100% MIT

aml

3516

OceanAlt666/oceanalt-aml-mcp

MCP server Claude CodeCodexCursor +2

Screen a payee address before an AI agent pays: sanctions, mixers, scam lists, on-chain risk. Runs locally from the oceanalt-aml-mcp npm package.

not rated 0 18d ago A Socket: warn tokens not measured original MIT

nymrel-studio-hub

3518

nymrel/nymrel-mcp-hub

Skill Claude CodeCodex

Use when a request needs one of the evidence-labeled local Nymrel MCP utilities for bounded public web extraction/search, structured-data examples, command-pattern checks, local cryptographic receipt operations, quote formulas, or declarative UI JSON.

not rated 0 5d ago A 54 tokens original MIT

keelen

3519

jamie7893/keelen-mcp

Plugin Claude Code

Bundles 1 MCP server

Connect a GitHub repo, file requests in plain language, track status, roadmap and shipped work, clear blockers, and run security, legal-exposure and control-gap reviews on Keelen's hosted MCP server.

not rated 0 1mo ago A tokens not measured original MIT

source-code-review

3521

oscarsterling/clelp-skills

Skill Claude Code

Read-only security review of a web app's source, from an entry-point census to ranked findings with evidence and a named guard for every dismissal.

not rated 0 15d ago A 33 tokens original MIT

chamber

3522

ceedot-rock/json-chamber-mcp

Skill Claude CodeCodex

Seal and open JSON with an MCP server. Use when an agent needs to store sensitive JSON sealed, open a sealed blob, or gate a hop. Cloak needs a license; open is keys-only.

not rated 0 3d ago A 44 tokens

CSOAI-ORG/csoai-dora-tlpt-planner-mcp

MCP server Claude CodeCodexCursor +2

DORA Article 26 Threat-Led Penetration Testing planner — TIBER-EU pathway scoping, white-team RACI, threat-intel templates, HMAC-signed compliance attestations. By MEOK AI Labs. Runs locally from the meok-dora-tlpt-planner-mcp Python package.

not rated 0 1mo ago A Socket: warn tokens not measured original MIT

xguard-control-plane

3525

moelayyan90/XGuard

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Scoped agent execution. Server-side credentials, policy, budgets and verifiable receipts. Remote server at api.xguardgate.com.

not rated 0 yesterday A tokens not measured

apilocker

3526

apilocker/apilocker

Plugin Claude Code

Bundles 3 skills, 1 MCP server · 200 tokens together

Keep API keys out of code, .env files, and chat: store them in your encrypted API Locker vault, inject them at runtime, rotate leaked keys, and call provider APIs without exposing the raw secret.

not rated 0 1mo ago A tokens not measured original MIT

safenode-policies

3528

sp3ak/safenode-mcp-gateway

Skill Claude CodeCodex

Design and write SafeNode policies that decide which AI agent actions are allowed, warned, held for human review, or denied, for MCP tools behind the SafeNode MCP Gateway or actions sent through the SafeNode SDKs. Use when the user asks what their agent should be allowed to do, wants to block deletes or writes outside…

not rated 0 21d ago A 112 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: