Security

CHROMA — Design Tokens Agent by VibeCodes. Paletas, tokens e contraste WCAG.

Give any AI agent a disposable email inbox in one tool call. MCP server for email verification, auth flows, and testing.

Capability-based policy enforcement for agent CLI actions

Connect any MCP client to ANHA over stdio. Handles OAuth (self-registration, PKCE, token refresh) so no key is ever pasted.

Offline security scanner for Node web apps and AI coding agents. OWASP rules with framework-specific fixes for 12 stacks, plus .claude/.cursor/.vscode config scanning. No telemetry.

Local-only configuration disclosure CLI for AI agent/MCP setups — reports what it found, what it did not find, and what it cannot see

MCP server for the seekingdata API: typed tools for live, fully sourced market data (crypto, FX, equities, commodities, macro, and more) plus Sightline security assessments - consult audit findings, re-audit diffs, and request scoped re-audits of a verifi

AI agent security platform — scan, fix, monitor, and pentest MCP servers, Claude skills, Codex plugins, Cursor extensions, and 5 more platforms. 227 rules across 17 threat categories.

Model Context Protocol server for FerrVault — vaults, secrets, secret requests, rotation

A lightweight utility that securely loads API keys for Cursor MCP servers from your home directory, preventing accidental exposure of secrets in repositories. Keep your credentials safe while maintaining seamless integration with AI coding assistants.

MCP server for Zetrix Verifiable Credentials (VC) and Verifiable Presentations (VP) — apply, issue, download VC and create, cache, verify VP via the Zetrix BaaS API.

MCP server — save, search, and retrieve reusable code snippets via Claude

Drop-in OAuth 2.1 + Dynamic Client Registration for MCP servers, backed by mcpauth.

Unofficial Substack MCP server. Born from frustration, built with AI. 12 tools, browser auth, rich text support. Not affiliated with Substack Inc.

SkillSync MCP server — search, scan, install & manage Claude Code skills with built-in security scanning and startup verification

Static security scanner that needs no parser: web/backend source and Apple platform configuration, as both a CLI and an MCP server.

Autentique MCP stdio client with OAuth support

MCP server exposing SlopStopper's production-readiness scanner (security, reliability, observability, functional, accessibility gaps) as tools for Claude Desktop, Cursor, or any MCP-compatible AI tool.

Reads HTML elements, numbers them on-page, and provides human-like activity controllers with real-time DOM updates & MCP Server integration.

Vengtoo MCP Gateway: policy-enforcing proxy between AI agents and MCP servers