Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

dyoe-trust-mcp

3529

bjyoe2016/dyoe-agent-tools-mcp

MCP server Claude CodeCodexCursor +2

MCP server for DYOE's 22 pay-per-call x402 tools: scam and trust checks, payment pre-flight, wallet screening, agent approvals, contacts and data. USDC on Base. Runs locally from the dyoe-trust-mcp npm package. Needs 2 environment variables to run.

not rated 0 18d ago A Socket: warn tokens not measured original MIT

safeselect-setup

3530

antonillos/safeselect

Skill Claude CodeCodex

Use when installing or configuring SafeSelect database access, importing connections, registering MCP and skills in Codex or OpenCode, resolving missing drivers or secrets, or diagnosing SSH and connection failures.

not rated 0 3d ago A 43 tokens original MIT

package-security

3531

letom1176-spec/orchard-data-mcp

Skill Claude CodeCodex

Dependency safety checks for coding agents over x402 (USDC on Base), $0.003-0.02 per call: known vulnerabilities for the exact version you would install (npm, PyPI, Go, crates.io, Maven, NuGet, RubyGems, Packagist), a whole lockfile or requirements.txt scanned in one call, hallucinated and typosquatted package names…

not rated 0 9d ago A 344 tokens

eu-ai-act

3532

alesop95/legal-consultant

Skill Claude Code

EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations…

not rated 0 2d ago A 266 tokens

mcp-whoisxmlapi

3533

whoisxmlapi/mcp-whoisxmlapi

MCP server Claude CodeCodexCursor +2

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API. Runs locally from the @whoisxmlapidotcom/mcp-whoisxmlapi npm package. Needs 1 environment variable to run.

not rated 0 yesterday A tokens not measured

zfuzz

3534

Zfuzz-dev/zfuzz-mcp

Plugin Cursor

Bundles 1 skill, 1 MCP server · 159 tokens together

Security copilot for AI coding agents. 10 real scanners your agent can call: SAST (441 rules, 7 languages), secrets (419 patterns), CVEs via OSV.dev, MCP/skill vetting, MITRE ATT&CK, threat modeling. Rust-native, deterministic, 100% local, no account, no API key.

not rated 0 9d ago A tokens not measured original Apache-2.0

take-birth-certificate

3535

Abracadabrastartup/deusproof-mcp

Skill Claude CodeCodex

Give yourself a public, dated identity proven with your own key, a birth certificate on the DEUSPROOF open register of AI agents. Use when asked to register, get an identity, or prove you are the real agent. Free, no account. Your key never leaves your machine.

not rated 0 yesterday A 64 tokens

kmcp

3536

magichrist/kali-mcp

MCP server Claude CodeCodexCursor +2

MCP server exposing Kali Linux penetration-testing tools to AI agents. Runs locally from the kmcp Python package.

not rated 0 today A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: