Security

Local RAG MCP server with hybrid search, PDF/DOCX support, and zero-config setup

Audit, optimize, and secure Claude Code, OpenClaw, and Hermes AI agent deployments. Token waste detection, security scanning, config drift, fleet SSH audit. Free to install.

Trident plugin for Codex and Claude Code: web-application penetration testing, security finding triage, and verified remediation over Trident's remote MCP server.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

Defenso MCP server for Claude Code, Cursor, Windsurf, and VS Code. Gives your AI assistant real security tools — scan any domain, check security headers, list uptime monitors, explain WAF verdicts. Deterministic, auditable, and safe to run inline.

Author, edit and run Bruno collections as files: HTTP, WebSocket, gRPC, per-request pass/fail.

Model Context Protocol server for OAuthLint. Lets AI coding tools scan their own generated OAuth/OIDC/JWT/session/CORS code for the anti-patterns OAuthLint catches, in-loop.

Header validator for MCP ABAP ADT - validates and prioritizes authentication headers

MCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.

Obsidian MCP server: semantic search, knowledge graph, and vault editing. No plugin required.

Scan a project for leaked secrets, risky MCP configs, and unsafe automation before handing it to an AI coding agent (Claude Code, Cursor, Codex). Zero dependencies, runs locally.

Offline security scanner for Node web apps and AI coding agents. OWASP rules with framework-specific fixes for 12 stacks, plus .claude/.cursor/.vscode config scanning. No telemetry.

Scans Greenhouse, Lever, Ashby, Workday, Rippling for roles in any category. Clay-ready.

Gmail MCP server — scope-gated tools + attachment/download path jails + supply-chain hardening. Fork of GongRzhe/Gmail-MCP-Server via ArtyMcLabin's intermediate fork.

Delegation-aware authorization middleware around the official MCP TypeScript SDK. The decision layer, not the SDK.

Stock and crypto market data — 49 tools for quotes, technicals, options, SEC filings, and more.

Rust MCP server for Obsidian vaults — read, write, search notes via Model Context Protocol. Works with Claude, Cursor, and any MCP client.

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Offline methodology engine for authorized penetration testing, CTF, and security research.

An MCP server for Clerk generated by @buildwithalyer