24,943 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
Skill Claude CodeCodex
Verify an exact public GitHub Agent Skill commit before installation, optionally purchase fresh isolated evidence over x402, and validate the signed receipt plus live lifecycle status. Use before installing or activating an unfamiliar SKILL.md package, when prior evidence may be stale, or when policy requires…
MCP server Claude CodeCodexCursor +2
Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events. Runs locally from the mcp-keycloak-admin npm package. Needs 10 environment variables to run.
MCP server Claude CodeCodexCursor +2
Audit AI/LLM features for governance guardrails: confidence, fallback, validation, human-in-loop. Runs locally from the @nugehs/aiglare npm package.
MCP server Claude CodeCodexCursor +2
Privacy compliance scanning for AI coding tools. Detects tracking tech, cookies, and data gaps. Runs locally from the pageguard-mcp npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
An MCP server that gives AI coding agents (Claude Code, Codex, Cline) safe, structured network & security reconnaissance tools — DNS, WHOIS, TLS, HTTP headers, and port scanning. For authorized testing and education only. Runs locally from the recon-kit-mcp Python package.
MCP server Claude CodeCodexCursor +2
Detect hardcoded secrets in source and config. Reports masked previews, never the values. Runs locally from the secrets-le-mcp npm package.
MCP server Claude CodeCodexCursor +2
13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100. Runs locally from the dechonet-mcp npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS exploit probability, recommends fix versions. Runs locally from the vulnfeed-mcp Python package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
One of 2 in server.json
Check an x402 endpoint before you pay it: verdict, risk score and what is wrong. $0.005 in USDC. Runs locally from the deadchannel-mcp npm package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
Multi-chain AML risk scoring, sanctions screening, and tx tracing across BTC, ETH, POL, AVAX, SOL. Runs locally from the chainanalyzer-mcp npm package. Needs 3 environment variables to run.
MCP server Claude CodeCodexCursor +2
DNS, IP info, SSL, WHOIS, ping for AI agents. Runs locally from the @rog0x/mcp-network-tools npm package.
santhosh-005/bevigil-mcp-server
MCP server Claude CodeCodexCursor +2
Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more. Runs locally from the bevigil-mcp-server npm package. Needs 1 environment variable to run.
Plugin Claude Code
Bundles 7 skills, 1 MCP server · 310 tokens together
Adversarial co-generation engine — generates code and adversarial attacks from the same spec, concurrently. Adds /gauntlex:run and friends, plus the gauntlex MCP server.
MCP server Claude CodeCodexCursor +2
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks. Runs locally from the @arcwall/mcp-server npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
A deterministic policy firewall for AI agent tool calls — blocks, warns, or allows based on rules you write, not a risk score. Runs locally from the guardrail-mcp Python package.
MCP server Claude CodeCodexCursor +2
Cryptographic identity for AI agents: W3C DIDs, Verifiable Credentials, post-quantum crypto. Runs locally from the @astracipher/core npm package.
MCP server Claude CodeCodexCursor +2
Local-first Wi-Fi incident diagnostics with native BLE scan, history, and risk evidence. Runs locally from the radiochron-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. Runs locally from the ghostfree npm package.
Skill Claude CodeCodex
Investigate authorized binaries and runtime behavior with HexWitness's durable evidence MCP and optional Binary Ninja or IDA live tools. Use for function or class discovery, UUID and field mapping, protocol reconstruction, capture comparison, contradiction analysis, evidence-gap planning, and promotion of live…
stevologic/security-recipes.ai
MCP server Claude CodeCodexCursor +2
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner. Remote server at security-recipes.ai.
MCP server Claude CodeCodexCursor +2
Local, privacy-first, MCP-native OSINT exposure scanner. Runs locally from the eidolon-osint Python package.
uchit/mcp-regulated-ai-compliance
MCP server Claude CodeCodexCursor +2
Regulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety. Runs locally from the @hellouchit/mcp-regulated-ai-compliance npm package.
MCP server Claude CodeCodexCursor +2
Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools. Remote server at dominion-observatory.sgdata.workers.dev.
MCP server Claude CodeCodexCursor +2
Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies. Runs locally from the gridwork-privacy npm package.