24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.
Plugin Claude Code
Bundles 1 skill, 3 commands, 1 hook · 161 tokens together
Grounds your AI coding agent in a cited security baseline (OWASP/CWE/EU AI Act) and warns before risky actions. Advisory, free, read-only. Real-time blocking is Kernora Axiora.
MCP server Claude CodeCodexCursor +2
Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log. Runs locally from the @marchward/mcp-server npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
An MCP server for Arcjet - the runtime security platform that ships with your AI code. Remote server at api.arcjet.com.
MCP server Claude CodeCodexCursor +2
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM. Runs locally from the @safeprompt.dev/mcp npm package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
Deterministic allow/requireapproval/deny verdicts for agent actions, before they happen. Remote server at policy-gate.3labsio.workers.dev.
MCP server Claude CodeCodexCursor +2
QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts. Remote server at api.qeaas.eu.
MCP server Claude CodeCodexCursor +2
Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0. Remote server at mcp.phishunt.io.
MCP server Claude CodeCodexCursor +2
AI compliance attestation for EU AI Act, SR 11-7, HIPAA. Free local tier, no key required. Runs locally from the @rubric-protocol/mcp-server npm package. Needs 1 environment variable to run.
Skill Claude CodeCodex
Apply OpenMesha two-layer AgentFence (ingest scan + act gate) and HOTL escalation. Use when reviewing untrusted tool output, inbound messages, or irreversible/money-moving actions.
Skill Claude CodeCodex
Use when the user asks to create, generate, build, audit, fix, compile, or look up smart contracts and tokens. Pentagonal Clawd is a sovereign smart contract forge and token intelligence platform with AI-powered 8-agent security pen testing across Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, and BSC.
MCP server Claude CodeCodexCursor +2
MCP server for VibeScan — scan projects for leaked secrets and security issues. Runs locally from the vibescan-mcp-server Python package.
MCP server Claude CodeCodexCursor +2
Trust scoring, scam detection, and EAS attestations for ERC-8004 + x402 agents on Base. Runs locally from the @agentradar/mcp npm package. Needs 2 environment variables to run.
Skill Claude CodeCodex
Digital content verification and deepfake detection. Verify text authenticity, detect AI-generated images, generate blockchain-anchored certificates.
MCP server Claude CodeCodexCursor +2
Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Required by EO 14028 + NIS2 + CRA. Runs locally from the sbom-cyclonedx-mcp Python package.
MCP server Claude CodeCodexCursor +2
AI-powered iso 42001 ai MCP server for agents. Supports audit management system, assess ai risk, generate policy template. By MEOK AI Labs. Runs locally from the iso-42001-ai-mcp Python package.
MCP server Claude CodeCodexCursor +2
Mint tamper-evident receipts for AI agent actions. The notary layer for agent-to-agent transactions. Runs locally from the evermint-mcp npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Rule-based site audits: accessibility, SEO, security headers, performance. Metered per call. Remote server at hubvibe-io.com.
Plugin Claude Code
Cryptographic audit trail for Claude Code. Every workflow step and agent action — timestamped, tamper-proof, and verifiable.
MCP server Claude CodeCodexCursor +2
Security suite for AI agents — catch the dangerous thing before it's signed. Preflight an unsigned EVM transaction for drains, inspect EIP-712 signatures for permit-phishing, and gate agent actions by policy. Pairs with any wallet or MCP stack; ships a non-custodial wallet too. Runs locally from the chain-signer…
MCP server Claude CodeCodexCursor +2
Proof-of-Time attestation — Ed25519-signed timestamps with multi-source corroboration and explicit error bounds. IETF draft-helmprotocol-tttps. Runs locally from the @helm-protocol/ttt-mcp npm package.
MCP server Claude CodeCodexCursor +2
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain. Runs locally from the agentseal-mcp npm package. Needs 1 environment variable to run.
OjasKord/url-safety-validator-mcp
MCP server Claude CodeCodexCursor +2
AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel. Runs locally from the url-safety-validator-mcp npm package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
Open-source AI context firewall for governed model, retrieval, memory, and tool access. Runs locally from the yagami Python package. Needs 3 environment variables to run.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: