Security

A local MCP server that breaks on demand. Test your client against auth failures, disappearing tools, flaky responses, and token expiry.

iota embedded policy engine as a pi coding-agent extension: hash-pinned bless, agents.yaml enforcement for read/write/edit/bash, JSONL decision log

MCP Server scanner - eliminate black boxes by capturing JSON-RPC from connection to tools/list

Model Context Protocol (MCP) server that enables your MCP client (e.g., Claude Desktop, Cline, Roo Code, Cursor, Windsurf, etc.) to interact with GitHub repositories using your GitHub personal access token.

Veriify MCP server — scan any website or your localhost dev server for security, accessibility, performance, and dark patterns from inside Claude Code, Cursor, Windsurf, and other AI dev tools. One Product Health Score with evidence for every finding.

MCP security scanner. Scores any MCP server against the AgentsID trust framework and looks up pre-scanned results from the public registry.

Dangerous config and secret scanner for AI coding agents, MCP, and local automation projects.

Scan, score, and enforce security policies on MCP servers. Risk scoring (A-F), SARIF output, policy engine, drift detection, aguara integration, CI/CD gate.

URLCheck plugin for OpenClaw. Assess target URLs for potential threats and alignment with the user's browsing intent before agent navigation.

Wall data reader + self-hosted MCP server (single binary). Reads Wall export ZIPs and serves them locally for personal viewing, search, and LLM access.

The official command-line interface for Creduent: the open standard and security protocol for cryptographic AI agent identity, authentication, and trust verification using Ed25519 and DNS.

Ory plugin for Goose (Block's open-source agent CLI): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call

Model Context Protocol (MCP) client support for Forgewisp agents — expose an MCP server's tools as agent FunctionDefinitions

Shared, consistent permission-prompt and policy layer for AI coding agent tools

BCS fork of GitLab MCP server for pipelines, repositories, merge requests, issues, and content masking

MCP server for Evernote integration with note management and synchronization

Scan any MCP server for prompt injection, tool poisoning, leaked secrets, and destructive capabilities. One command, no key, no signup.

Latten Installer — a Codex-ready MCP server that provisions, scans, and instruments TypeScript AI apps so cost, reach, and blast radius show up in Latten. Every change lands as a reviewable PR you approve.

Security toolkit for MCP config files — scan, test, harden, and probe tool connections before you use them.

Native XMemo cloud-memory provider for OpenClaw agents: long-term memory, semantic recall, TODOs, snapshots, and audit tools.