MCP servers and skills: search, filter by where they run, and compare.
MCP server for the SecurityTrails API — DNS history, subdomain enumeration, WHOIS, SSL certificates and IP intelligence as tools for LLM agents.
Node.jsMITFew starsNo key
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workl
OfficialSkillApache-2.0★ 21k in collectionNo key
Security for AI agents: 8 MCP tools - config audits, secret redaction, skill vetting, network scans, agent-native checkout
PythonApache-2.0Few starsNo key
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
PythonMIT★ 14No key
Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (`audit_cluster.sh`), enforcing Network
OfficialSkillApache-2.0★ 21k in collectionNo key
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM codin
SkillMIT★ 20No key
Zero-key cybersecurity MCP server: grade any site security A+ to F, check if a CVE is actively exploited, get plain-English MITRE ATT&CK defenses. No API keys, no signups.
PythonMITFew starsNo key
A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and m
PythonApache-2.0★ 84No key
Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall, aut
OfficialSkillMIT★ 1.0k in collectionNo key
🔌 Exposes Security scanning over MCP — vulnerability assessment, SAST, DAST, dependency checking, SBOM analysis. MIT.
PythonMITFew starsNo key
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
Node.jsMIT★ 124No key
Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit to
OfficialSkillApache-2.0★ 21k in collectionNo key
Talk to the SecurityScorecard API in natural language from Claude and other MCP clients. Community-built MCP server: 9 tools for issue triage, asset discovery, email-security checks and score insights
MCPLink onlyFew stars
Scope, audit, harden, and retest web projects with AI coding agents and reproducible evidence.
SkillMIT★ 4Few starsNo key
MCP Server Security Standard (MSSS): an open, testable security control standard for certifying MCP servers, with levels, evidence requirements, and reporting schemas.
SkillCC-BY-SA-4.0★ 74No key
A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
Node.jsMIT★ 57No key
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security work
SkillMIT★ 788No key
Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and
SkillMIT★ 1.2kNo key
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or sh
OfficialSkillMIT★ 40k in collectionNo key
Claude Code plugin with two OWASP-grounded security skills: audit code, APIs, Kubernetes and LLM/agent apps against OWASP standards, and review against a 14-domain secure coding checklist.
SkillMIT★ 2Few starsNo key
✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
SkillApache-2.0★ 42No key
OfficialSkillApache-2.0★ 532No key
Secure NotebookLM MCP Server - Query Google NotebookLM from Claude/AI agents with 17 security hardening layers
Node.jsMIT★ 86No key
Who stands behind it
