Security

27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.

pageguard-mcp

2185

pageguard/pageguard-mcp

MCP server Claude CodeCodexCursor +2

Privacy compliance scanning for AI coding tools. Detects tracking tech, cookies, and data gaps. Runs locally from the pageguard-mcp npm package. Needs 1 environment variable to run.

not rated 1 7mo ago A tokens not measured original MIT

recon-kit-mcp

2186

nan786521/recon-mcp

MCP server Claude CodeCodexCursor +2

An MCP server that gives AI coding agents (Claude Code, Codex, Cline) safe, structured network & security reconnaissance tools — DNS, WHOIS, TLS, HTTP headers, and port scanning. For authorized testing and education only. Runs locally from the recon-kit-mcp Python package.

not rated 1 2mo ago A tokens not measured original MIT

secrets-le

2187

nolindnaidoo/secrets-le

MCP server Claude CodeCodexCursor +2

Detect hardcoded secrets in source and config. Reports masked previews, never the values. Runs locally from the secrets-le-mcp npm package.

not rated 1 8d ago A tokens not measured original MIT

vulnfeed

2188

novadyne-hq/vulnfeed-mcp

MCP server Claude CodeCodexCursor +2

Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS exploit probability, recommends fix versions. Runs locally from the vulnfeed-mcp Python package. Needs 1 environment variable to run.

not rated 1 1mo ago A tokens not measured original MIT

deadchannel

2189

plus8bit/deadchannel

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Check an x402 endpoint before you pay it: verdict, risk score and what is wrong. $0.005 in USDC. Runs locally from the deadchannel-mcp npm package. Needs 2 environment variables to run.

not rated 1 2mo ago A tokens not measured

network

2190

rog0x/mcp-network-tools

MCP server Claude CodeCodexCursor +2

DNS, IP info, SSL, WHOIS, ping for AI agents. Runs locally from the @rog0x/mcp-network-tools npm package.

not rated 1 7mo ago A tokens not measured

gauntlex

2191

sanjoy1234/gauntlex

Plugin Claude Code

Bundles 7 skills, 1 MCP server · 310 tokens together

Adversarial co-generation engine — generates code and adversarial attacks from the same spec, concurrently. Adds /gauntlex:run and friends, plus the gauntlex MCP server.

not rated 1 1mo ago A tokens not measured original MIT

arcwall-security

2192

rom-baro/arcwall-mcp

MCP server Claude CodeCodexCursor +2

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks. Runs locally from the @arcwall/mcp-server npm package. Needs 1 environment variable to run.

not rated 1 6mo ago A tokens not measured

agent-guardrail

2193

rudimentall1/agent-guardrail

MCP server Claude CodeCodexCursor +2

A deterministic policy firewall for AI agent tool calls — blocks, warns, or allows based on rules you write, not a risk score. Runs locally from the guardrail-mcp Python package.

not rated 1 1mo ago A tokens not measured original MIT

astracipher

2194

san-techie21/astracipher

MCP server Claude CodeCodexCursor +2

Cryptographic identity for AI agents: W3C DIDs, Verifiable Credentials, post-quantum crypto. Runs locally from the @astracipher/core npm package.

not rated 1 1mo ago A tokens not measured

radiochron

2195

sergii-ziborov/radiochron-mcp

MCP server Claude CodeCodexCursor +2

Local-first Wi-Fi incident diagnostics with native BLE scan, history, and risk evidence. Runs locally from the radiochron-mcp npm package.

not rated 1 2mo ago A tokens not measured original MIT

ghostfree

2196

shane-js/ghostfree

MCP server Claude CodeCodexCursor +2

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. Runs locally from the ghostfree npm package.

not rated 1 7mo ago A tokens not measured original MIT

eidolon-osint

2197

sudohnim/eidolon

MCP server Claude CodeCodexCursor +2

Local, privacy-first, MCP-native OSINT exposure scanner. Runs locally from the eidolon-osint Python package.

not rated 1 1mo ago A tokens not measured AGPL-3.0

uchit/mcp-regulated-ai-compliance

MCP server Claude CodeCodexCursor +2

Regulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety. Runs locally from the @hellouchit/mcp-regulated-ai-compliance npm package.

not rated 1 5mo ago A tokens not measured original Apache-2.0

privacy

2199

thegridwork/privacy

MCP server Claude CodeCodexCursor +2

Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies. Runs locally from the gridwork-privacy npm package.

not rated 1 6mo ago A tokens not measured

otr-protocol

2200

yb48666-ctrl/OTR-Protocol-by-orbexa

MCP server Claude CodeCodexCursor +2

Merchant trust verification for AI agents. One call = trust score, badge, and purchase safety. Runs locally from the @otr-protocol/mcp-server npm package.

not rated 1 7mo ago A tokens not measured original MIT

armor

2201

studiomeyer-io/mcp-armor

MCP server Claude CodeCodexCursor +2

MCP server "armor" as configured in studiomeyer-io/mcp-armor. Runs in Docker (ghcr.io/studiomeyer-io/mcp-armor:0.8.1).

not rated 1 changed 1mo ago A tokens not measured original MIT

server

2202

BeBraveBeKind/mcpskills-server

MCP server Claude CodeCodexCursor +2

Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning. Runs locally from the @mcpskillsio/server npm package. Needs 1 environment variable to run.

not rated 1 5mo ago A tokens not measured original MIT

numertel

2203

AMR-DEV-PS/numertel-mcp

MCP server Claude CodeCodexCursor +2

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats. Remote server at numertel.pl.

not rated 1 4mo ago A tokens not measured original MIT

security-guardrails

2204

ofershap/vibe-guard

Cursor rule Cursor

Vibe Guard - always-on security guardrails for AI-generated code.

not rated 1 8mo ago A 282 tokens original MIT

huiyu-safe-ai

2205

huiyu9144/huiyu-safe-ai

Skill Claude Code

Lightweight AI security guard that intercepts risky install/download commands (npm, npx, pip, cargo, git clone) to block known malicious packages and scan for suspicious code. Invoke ONLY when user runs install/download/clone commands.

not rated 1 5mo ago B 52 tokens

mcp-rampart

2206

miloudbelarebia/mcp-rampart

MCP server Claude CodeCodexCursor +2

Security toolkit for FastAPI-based MCP servers — pre-flight audit + runtime prompt-injection guardrail. Runs locally from the mcp-rampart Python package.

not rated 1 5mo ago A tokens not measured original MIT

bumblebee

2207

mycelos-ai/bumblebee-skill

Skill Claude CodeCodex

Run Bumblebee supply-chain inventory and exposure scans on the local machine. Use this skill whenever the user wants to check developer endpoints for compromised npm/PyPI/Go/RubyGems/Composer packages, audit installed editor or browser extensions, inspect MCP host configs, or perform supply-chain incident response on…

not rated 1 5mo ago A 189 tokens original MIT

mcp-pii-guard-au

2208

mattwagstaff/mcp-pii-guard-au

MCP server Claude CodeCodexCursor +2

MCP server for Australian PII detection and sanitisation — TFN, Medicare, ABN, ACN, BSB, bank account, drivers licence, passport, Centrelink CRN, and address recognisers with checksum validation, compliance audit logging, built on Presidio. Runs locally from the mcp-pii-guard-au Python package.

not rated 1 7mo ago A tokens not measured original MIT