27,008 mods in this category, of every kind an agent can take. Each one carries what it costs per session, what the scan found, and whether it is the original.
MCP server Claude CodeCodexCursor +2
MCP server "vulnpilot-mcp" as configured in arojit/vulnpilot-mcp. Runs locally from the vulnpilot-mcp Python package.
badchars/living-off-the-land-lolbins-mcp-server
MCP server Claude CodeCodexCursor +2
Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering. Runs locally from the living-off-the-land-lolbins-mcp-server npm package.
gcorroto/mcp-secure-env-elicit
MCP server Claude CodeCodexCursor +2
MCP wrapper that launches other MCP servers with secret env vars collected interactively via elicitation — placeholders in config, values held AES-encrypted in memory, never on disk. Runs locally from the @grec0/mcp-secure-env-elicit npm package.
antonorlov/secure-telegram-mcp
MCP server Claude CodeCodexCursor +2
The secure Telegram MCP server: encrypted sessions, folder-scoped access, read-only by default. Per-endpoint API keys. Runs locally from the secure-telegram-mcp npm package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
MCP server exposing @ekaone utility tools for AI-assisted data masking. Runs locally from the @ekaone/mcp-tools npm package.
easygoingcoder/blackduck-polaris-mcp-server
MCP server Claude CodeCodexCursor +2
Feature-rich MCP server for Black Duck Polaris — trigger SAST/SCA/DAST scans, query findings, generate reports (SBOM, SPDX, CycloneDX), manage policies, triage issues, and more. Works with Claude Code, Claude Desktop, GitHub Copilot, Cursor, and any MCP-c. Runs locally from the blackduck-polaris-mcp-server npm package.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-shield-runtime" as configured in samsgates/mcp-shield-runtime. Runs locally from the mcp-shield-runtime npm package.
MCP server Claude CodeCodexCursor +2
MCP server "mcp-privilege-profiler" as configured in Ylyass/mcp-privilege-profiler. Runs locally from the mcp-privilege-profiler Python package.
MCP server Claude CodeCodexCursor +2
MCP server for SEC EDGAR filing intelligence (search, retrieval, evaluation). Runs locally from the sec-intelligence-mcp Python package. Needs 8 environment variables to run.
Ghosthunter5599/Forensics-MCP-Server-FastMCP-Ollama
MCP server Claude CodeCodexCursor +2
MCP server "forensic-analyzer" as configured in Ghosthunter5599/Forensics-MCP-Server-FastMCP-Ollama. Launched with uv --directory /home/b47m4n/Projects/forensics-mcp-framework run src/server.py.
MCP server Claude CodeCodexCursor +2
MCP (stdio JSON-RPC) server for Pentool AI — local LLM assistant for pentest. Runs locally from the pentool-mcp-server Python package.
danveil/mcp-security-inspector
MCP server Claude CodeCodexCursor +2
MCP server "mcp-tool-security-inspector" as configured in danveil/mcp-security-inspector. Runs locally from the mcp-tool-security-inspector Python package.
MCP server Claude CodeCodexCursor +2
Ai Ops MCP server. Tools: system health check, check service, security scan. Built by MEOK AI Labs. Runs locally from the ai-ops-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server for the Control D API — spec-driven tools, two-token least-privilege auth. Runs locally from the controld-mcp npm package.
MCP server Claude CodeCodexCursor +2
Security and canonical authorization infrastructure for AI agents and automated tool use. Runs locally from the agent-firewall-security Python package.
nidhish28guhan-netizen/hachiman-agent
Skill Claude CodeCodex needs its repo
Hachiman is a watchman that thinks like an attacker. On an authorized target it runs.
MCP server Claude CodeCodexCursor +2
MCP server "sql-guard-mcp" as configured in egoring/sql-guard-mcp. Launched with sql-guard-mcp. Needs 2 environment variables to run.
Plugin Claude Code
Bundles 2 skills, 2 hooks, 1 MCP server · 137 tokens together
Payment firewall for AI agents: a signed, verifiable verdict on every money-moving action. Blocks wrong/lookalike payee, over-cap, and duplicate-invoice fraud before it settles. Non-custodial, local-first.
MCP server Claude CodeCodexCursor +2
Tells you what leaked in a .har capture, who's on the page, and what to strip. No network calls. Runs locally from the har-forensics-mcp npm package.
MCP server Claude CodeCodexCursor +2
AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base. Remote server at mcp.fronesislabs.com.
MCP server Claude CodeCodexCursor +2
MCP client for QueryShield — secure SQL proxy for AI agents. Runs locally from the queryshield-mcp Python package. Needs 2 environment variables to run.
MCP server Claude CodeCodexCursor +2
MCP server "threatlocker-mcp" as configured in WYRE-AI/threatlocker-mcp. Runs in Docker (ghcr.io/wyre-ai/threatlocker-mcp:v1.3.9). Needs 5 environment variables to run.
Plugin Claude Code
Bundles 35 skills, 1 MCP server · 2,639 tokens together
Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.
MCP server Claude CodeCodexCursor +2
MCP server exposing the OpenCTI threat-intelligence platform to AI assistants. Runs locally from the opencti-mcp Python package.