Security

4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.

Model Context Protocol adapter for Proof-Carrying Authority: wrap an MCP tool handler so every call emits a PCActn (and attaches the proof) before the handler runs.

A small autonomous team-agent runtime powered by Rust

An MCP server that lets a coding assistant set up and manage Cauthy for an application: connect a system, invite people, organizations, roles, sign-in providers and the guide.

Wall data reader + self-hosted MCP server (single binary). Reads Wall export ZIPs and serves them locally for personal viewing, search, and LLM access.

MCP server for multi-Google-account access (Gmail, Calendar, Drive) [BETA - Google OAuth approval pending, by-invite access]

Use passwords and API keys from your KeyZula vault without the assistant seeing them.

DeepSeek Harness plugin: one-click OAuth (PKCE) connect to the Qixin Insight MCP server, mounted as a single plugin entry

MCP security trust-check for agents before installing MCPs, Skills or tools.

Resolve a company domain to its GitHub organization with repo, language and activity signals.

GitHub MCP Server with OAuth support for Issue management

Registrar core for the HostAfrica Connector: detects AI clients and registers the HostAfrica MCP server with each, OAuth-first

Trident plugin for Codex and Claude Code: web-application penetration testing, security finding triage, and verified remediation over Trident's remote MCP server.

Open-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.

Claude auto mode for Pi & security for Pi. A zero-trust permission system for Pi coding agent powered by Advanced Secure mode to scan files, content, and tools to prevent data breaches.

Shared auth (OAuth PKCE + loopback login), HTTP client and MCP helpers for Yandex MCP servers.

Canary-proof security checks for MCP servers -- verifies real behavior instead of pattern-matching code.

Dependency-free TypeScript checks that compare an AI agent's report with the actions and evidence ids it was issued and with a caller-supplied observation.

A lite, single-org Salesforce MCP server built on jsforce. Bring-your-own OAuth token — no credentials stored server-side. Runs over stdio (Claude Code) or as a dedicated streamable-HTTP server.

Local-first developer secrets manager — store encrypted env vars, manage API keys across projects, resolve provider identities, and inject secrets into commands. CLI + MCP server. No cloud, no account.