Search
PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.
Drewnja
MCP server that turns a description in plain language into a CORAS risk or threat diagram, in the file format of the SINTEF Threat Modelling Tool (which it ships with).
...moredejimarquis
Trust verification layer for AI agent skill marketplaces - scan, score, and verify skills before installation
boxpositron
OpenCode plugin that prevents agents/tools from reading or editing sensitive .env* files, while still allowing safe inspection via EnvSitter.
...morediv0.space
MCP Server for Semgrep Integration - static code analysis with AI
aqhmal
MCP server for the SecurityTrails API — DNS history, subdomain enumeration, WHOIS, SSL certificates and IP intelligence as tools for LLM agents.
...moreInstalled software, vulnerabilities and end-of-life components across your servers, apps and repos
GoCreative
Python SDK for GoCreative — a 17-model frontier LLM gateway + 350+ data/compliance tools for AI agents. Pay-per-call USDC on Base via x402, no API key.
...moreppiankov
Detects and obfuscates sensitive data before it reaches AI systems — clipboard, CLI, and MCP server
kubeleash
Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.
timunbasah3
🚀 Discover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.
...morelidless-labs
Your SIEM answers live behind a console you babysit. wazuh-mcp reads Wazuh alerts, agents, and CVEs straight into your AI client. Read-only, nothing leaves the box.
...moreStatic analysis that catches the production bugs AI coding tools write. 52 rules.
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
OTT Cybersecurity LLC
Model Context Protocol (MCP) adapter for Lyrie Agent — connect to and host MCP servers
IDA Script MCP Contributors
MCP server for executing IDAPython scripts in IDA Pro with multi-instance support
arhancanli
Checks GitHub Actions workflows: outdated actions, old Node runtimes, retired runners, injection.