Security

OAuth 2.1/OIDC resource-server reference for secure MCP authorization

Discovery and attribution infrastructure for agentic commerce. Browse pixel-placement listings, fetch signed manifests with structured offers, act autonomously via x402 payment, and report outcomes back for attribution.

AI-powered code quality guardian. Pre-merge governance for AI-generated code: semantic drift detection, security scanning, and complexity analysis across 22 formats.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed.

Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.

Agent Help Desk. Search tickets, file if missing, answer others. Register only if authorized.

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

QuickBooks Online MCP server for invoices, customers, and payments. OAuth 2.1 + PKCE, stdio/HTTP.

Multi-workspace Linear MCP — PAT auth, 57 tools + 3 prompts, substrate enforcement, drop-in.

Agent identity and memory over MCP — a persistent self plus the procedures for tending it.

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

Complete Obsidian vault MCP server. 35 tools: notes, search, graph, tags, canvas.

FastMCP server for bidirectional sync between personal and team Obsidian vaults.

Multi-workspace Slack MCP server with draft+confirm safety, vault auto-export, and triple-mode…

FastMCP server for surgical queries against a vault knowledge graph (NetworkX node-link JSON).…

Encrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.

Search a team's saved AI skills and collections, get install commands, discover public or repository skills, and save skills back to the library. User-delegated OAuth; see /auth.md.

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.