Security

26,946 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

badchars/supply-chain-mcp-server

MCP server Claude CodeCodexCursor +2

Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more. Runs locally from the supply-chain-mcp-server npm package.

not rated 3 +1 1mo ago A tokens not measured original MIT

tailscale-mcp

1682

GumbyEnder/mcp-tailscale

Skill Claude CodeCodex

Secure homelab networking with Tailscale + self-hosted Hermes agents via the mcp-tailscale MCP server.

not rated 3 4mo ago B ✓ AI review 29 tokens original MIT

prompt-injection-mcp

1683

Xiangyu-Li97/prompt-injection-mcp

MCP server Claude CodeCodexCursor +2

MCP server "prompt-injection-mcp" as configured in Xiangyu-Li97/prompt-injection-mcp. Runs locally from the prompt-injection-mcp npm package.

not rated 3 9mo ago A tokens not measured

tenable-vpr-mcp

1684

Sabastiaz/tenable-vpr-mcp

MCP server Claude CodeCodexCursor +2

MCP server "tenable-vpr-mcp" as configured in Sabastiaz/tenable-vpr-mcp. Runs locally from the tenable-vpr-mcp Python package.

not rated 3 3mo ago A tokens not measured original MIT

sentinel-mcp

1686

fncreator22/sentinel-mcp

MCP server Claude CodeCodexCursor +2

SENTINEL MCP server — pre-execution transaction safety oracle for AI agents, paid autonomously via x402 on Base. Runs locally from the sentinel-mcp Python package.

not rated 3 2mo ago A tokens not measured original MIT

agent-skill-risk-scan

1688

doteyeso-ops/mcp-server-vibes-coded

Skill Claude CodeCodex

Use before installing an untrusted SKILL.md, MCP plugin, package script, or agent installer. Buys a deterministic supply-chain risk report for $0.05 USDC through FiatDock.

not rated 3 8d ago A 46 tokens original MIT

signet-eval

1689

jmcentire/signet-eval

Plugin Claude Code

Bundles 1 hook

Deterministic policy enforcement for AI agent tool calls across Claude Code, Codex, Antigravity, and OpenCode.

not rated 3 2mo ago A tokens not measured original MIT

malwareanalyzermcp

1690

abdessamad-elamrani/MalwareAnalyzerMCP

MCP server Claude CodeCodexCursor +2

MCP server "malwareanalyzermcp" as configured in abdessamad-elamrani/MalwareAnalyzerMCP. Runs locally from the malwareanalyzermcp npm package.

not rated 3 1y ago A tokens not measured

abusech-mcp

1691

lokallost/abusech-mcp

MCP server Claude CodeCodexCursor +2

MCP server "abusech-mcp" as configured in lokallost/abusech-mcp. Runs locally from the abusech-mcp Python package.

not rated 3 1y ago A tokens not measured original MIT

mcp-guard

1692

alramalho/mcp-guard

MCP server Claude CodeCodexCursor +2

Simple HTTP proxy that gates MCP servers with block rules. Runs locally from the @alramalho/mcp-guard npm package.

not rated 3 8mo ago A tokens not measured

vrchat-mcp

1693

BASIC-BIT/vrchat-mcp

Skill Claude CodeCodex

Use when operating VRChat MCP tools, especially auth, privacy-sensitive results, writes, stale cache, or resolving names to IDs.

not rated 3 8d ago A 31 tokens original MIT

secure-host-mcp

1694

Razewang/secure-host-mcp

MCP server Claude CodeCodexCursor +2

Cross-platform remote terminal MCP server with OAuth, jobs, tunnels, and auditing. Runs locally from the secure-host-mcp npm package.

not rated 3 3mo ago A tokens not measured original MIT

mcp

1695

Tuteliq/mcp

MCP server Claude CodeCodexCursor +2

Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video. Runs locally from the @tuteliq/mcp npm package. Needs 1 environment variable to run.

not rated 3 4d ago A tokens not measured original MIT

dns-doctor

1696

dnsdoctor/claude-plugin

Plugin Claude Code

Bundles 3 skills, 1 MCP server · 273 tokens together

Scan, fix, verify and monitor a domain's DNS: email authentication (SPF, DMARC, DKIM) with DMARC monitoring and evidence-based enforcement guidance, plus multi-region propagation, SPF include supply-chain audits, MX, DNS health, blacklists and domain/SSL expiry. Returns deterministic verdicts and copy-paste fix…

not rated 3 +1 changed today A tokens not measured original Apache-2.0

calllint

1697

calllint/calllint

Plugin Claude Code

Bundles 1 skill, 1 hook, 1 MCP server · 46 tokens together

Preflight risk linting for MCP & agent tools. Before you add or edit an agent-tool config, CallLint recommends scanning the blast radius — SAFE / REVIEW / BLOCK / UNKNOWN with evidence. Advisory and non-blocking; never executes the server it judges.

not rated 3 4d ago A tokens not measured original Apache-2.0

ako2345/android-security-analyzer

MCP server Claude CodeCodexCursor +2

MCP server for static security analysis of Android source code. Remote server at android-security-analyzer.ako-labs.workers.dev.

not rated 3 7mo ago A tokens not measured

air-blackbox-mcp

1699

airblackbox/air-blackbox-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

MCP server for EU AI Act compliance scanning with GDPR and bias detection - scan, analyze, remediate, and protect AI agent code. Runs locally from the air-blackbox-mcp Python package.

not rated 3 22d ago A tokens not measured original Apache-2.0

privacyscrubber-mcp

1700

moxno/privacyscrubber-mcp

MCP server Claude CodeCodexCursor +2

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction. Runs locally from the @privacyscrubber/mcp-server npm package. Needs 1 environment variable to run.

not rated 3 today A tokens not measured original

whisper

1701

whisper-sec/whisper-cli

MCP server Claude CodeCodexCursor +2

One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup. Runs locally from the @whisper-security/whisper-mcp npm package.

not rated 3 changed 27d ago A tokens not measured original MIT

mcp-code-sanitizer

1703

notasandy/mcp-code-sanitizer

MCP server Claude CodeCodexCursor +2

Strict AI code reviewer MCP server powered by Groq — finds bugs, vulnerabilities and security issues. Runs locally from the mcp-code-sanitizer Python package. Needs 1 environment variable to run.

not rated 3 5mo ago A tokens not measured original MIT

lint-drupal-module

1704

j4rk0r/claude-skills

Skill Claude Code

Lint review completo de un módulo Drupal 11 combinando 4 fuentes en paralelo — PHPStan level 5 + phpstan-drupal, PHPCS Drupal/DrupalPractice, agente drupal-qa (estándares) y agente drupal-security (OWASP). Dos modos — completo (todo el módulo) y diff (solo archivos cambiados vs develop). Genera informe markdown…

not rated 3 3mo ago A 225 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: