MCP servers and skills: search, filter by where they run, and compare.
Bundle audit MCP for IaC: docker-compose + Dockerfile + GitHub Actions + HU postcode under one endpoint. Pay-per-event via Apify Actor Store.
MCPLink onlyFew stars
Attack-path auditor for Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes) - MCP server + pay-per-call x402 API. Finds internet-to-crown-jewel chains, not just lint.
in the readmeTerraform, CloudFormation, Kubernetes, CDK, Pulumi, Bicep/ARM.** Not a linter. It parses your IaC into a **resource graph**, resolves cross-resource (and cross-file) relationships, and searches
Hosted by authorMITFew starsNo key
Language Server used by IDEs as Snyk Backend for Frontends
in the readmeInfrastructure as Code, Snyk Code, and Snyk Secrets. For Open Source and IaC it uses the Snyk CLI as a data provider; Snyk Code uses the
OfficialGoApache-2.0★ 82No key
Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.
in the readmerepo and keeps a live knowledge graph — call structure, types, tests, decisions, IaC, spec drift. Your agent queries it to **start every task already oriented** and
Node.jsMIT★ 320No key
A centralized hub for platform engineering teams, providing resources, best practices, and automation tools. Includes IaC templates, blueprints, and operational guides to help build scalable, secure,
SkillMIT★ 102No key
AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！
in the readme集成 | | ** DevOps Engineer ** | `npx skills install peterfei/ai-agent-devops-engineer` | CI/CD 流水线、K8s 编排、IaC、可观测性 | | ** Fullstack Engineer ** | `npx skills install peterfei/ai-agent-fullstack-engineer` | 前后端一体化、API 集成、端到端功能实现 | 兼容 Claude Code
Node.jsMIT★ 441No key
Open-source Infrastructure As Code that starts from what already runs. formae discovers your estate, versions drift and hands back current code. A Terraform and Pulumi alternative built on Pkl, with a
MCPLink only★ 775
A curated list of 474 AI tools, agents, MCP servers, and resources for DevOps, SRE, and Platform Engineering — updated July 2026
in the readmeCoding Agents for Infrastructure - AI-Powered Kubernetes - AI-Powered Terraform and IaC - AI Incident Response and Troubleshooting - AI Monitoring and Observability - AI Security Scanning - AI Cost
SkillCC0-1.0★ 39No key
MCP server for AWS infrastructure analysis — DynamoDB, Lambda, SQS, SNS, S3, API Gateway, PostgreSQL, MySQL, MongoDB, Kafka & IaC drift. Works with Claude Code, Cursor, and GitHub Copilot.
Node.jsMIT★ 22No key
Official Alibaba Cloud MCP servers, skills, and plugins to help AI agents build on Alibaba Cloud
in the readmeexecution workflow for Alibaba Cloud infrastructure operations driven by Terraform and IaC Service. ## Repository Layout ```text . ├── plugins/ │ ├── alibabacloud-core/ │ ├── alibabacloud-spec-ops/ │ ├── alibabacloud-agent/ │ └── alibabacloud-data
SkillApache-2.0★ 28No key
Practical MuleSoft recipes — 100+ DataWeave patterns, AI agent integration, CI/CD pipelines, migration guides, and more.
in the readmeRAG, Agentforce, inference, Vibes, AI testing, AI gateway | 63 | | **DevOps** | CI/CD pipelines, IaC, secrets, deployment, testing, observability | 53 | | **Migrations** | Java versions, runtime upgrades, CloudHub, connectors, architecture
SkillMIT★ 42No key
Security scanning for CI from one file: SAST, SCA, secrets, IaC and containers, with every finding ranked by exposure, criticality, exploitability and reachability.
GoApache-2.0★ 7No key
⚡ AI Automation Engine
in the readmeinto a single report. | Scanner | What it checks | | ------------- | ------------------------------------------------ | | Trivy | Container images, filesystems, IaC misconfigs | | Gitleaks | Secrets, API keys, tokens in source code | | Checkov | Terraform, CloudFormation, K8s
SkillMIT★ 18No key
Reorg-aware observatory of the Monero network: chain reorganizations, orphan blocks, mining-pool centralization. Public dashboard + API + MCP.
in the readmefor the health of the Monero network: public dashboard + API.   | | `scan [path]` | Standard scan (patterns + secrets + deps + IaC + AI) | | `variants [cve-id]` | Find variants of known CVEs in your codebase | | `fix
Node.jsMIT★ 45No key
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
in the readmeCIS Azure Benchmark v2.1 | | GCP Security Review | `skills/cloud/gcp-review/` | CIS GCP Benchmark v2.0 | | IaC Security | `skills/cloud/iac-security/` | OWASP IaC Security, SLSA v1.0 | | Container Security | `skills/cloud/container-security/` | CIS Docker v1.6
SkillMIT★ 85No key
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any agentskills.io agent
in the readmefans out to 8 parallel specialists: vuln detection, authz, secrets, supply chain, IaC, threat-intel, AI-code patterns, business logic | Browse the full catalog in `docs/arsenal.md
SkillApache-2.0★ 12No key
An economical and fuel(token) efficient AI tool, graph session memory for looong chat session
in the readmemerge --source testout --file results.json # jest / pytest / JUnit fish-bridge merge --source iac --path ./ # Terraform / CDK / CloudFormation fish-bridge merge --source openapi --file openapi.yaml fish-bridge
PythonMIT★ 2Few starsNo key
Aforo metering SDKs (Node/Python/Java/Go + GraphQL/gRPC/WebSocket/MQTT + MCP/agent), API gateway plugins (Kong/Apigee/AWS/Azure/MuleSoft), and the EMQX broker plugin — send usage events to Aforo for b
in the readmeOutbound XML/C# policy | | MuleSoft | `aforo-gateway-plugins/mulesoft` | DataWeave custom policy | Plus IaC templates in `aforo-gateway-plugins/aws-cloudformation` and `aforo-gateway-plugins/azure-arm-templates` , and per
Node.jsApache-2.0Few starsNo key
GDPR Shift-Left Compliance MCP Server — Azure-focused GDPR compliance automation.
in the readmeanalyze code patterns, generate DPA checklists ### 🏗️ Infrastructure & Code Review - **Bicep/Terraform/ARM Analyzer** — Scan IaC for GDPR violations (encryption, access, network, residency, logging, retention) - **Application Code Analyzer** — Detect
PythonMIT★ 2Few starsNo key
Who stands behind it
Who stands behind it
