MCP servers and skills: search, filter by where they run, and compare.
Bundle audit MCP for IaC: docker-compose + Dockerfile + GitHub Actions + HU postcode under one endpoint. Pay-per-event via Apify Actor Store.
MCPLink onlyFew stars
Attack-path auditor for Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes) - MCP server + pay-per-call x402 API. Finds internet-to-crown-jewel chains, not just lint.
in the readmeTerraform, CloudFormation, Kubernetes, CDK, Pulumi, Bicep/ARM.** Not a linter. It parses your IaC into a **resource graph**, resolves cross-resource (and cross-file) relationships, and searches
Hosted by authorMITFew starsNo key
Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.
in the readmerepo and keeps a live knowledge graph — call structure, types, tests, decisions, IaC, spec drift. Your agent queries it to **start every task already oriented** and
Node.jsMIT★ 320No key
AWS Skills for Agents
in the skill textdeep expertise across 18 AWS domains, enabling automated cloud engineering support from IaC templates to debugging guidance and security best practices. Automatically checks AWS documentation for
SkillMIT★ 1.2kNo key
Terraform Skill for Claude Code and Codex. LLMs hallucinate a lot with Terraform - TerraShark fixes this. It eliminates hallucinations, is designed for modular and secure code and grounds your IaC in
SkillMIT★ 716No key
A centralized hub for platform engineering teams, providing resources, best practices, and automation tools. Includes IaC templates, blueprints, and operational guides to help build scalable, secure,
SkillMIT★ 102No key
Claude Code plugins and agent skills for AWS development — IaC(CDK/SST), serverless, cost ops, and Bedrock AgentCore
SkillMIT★ 367No key
AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！
in the readme集成 | | ** DevOps Engineer ** | `npx skills install peterfei/ai-agent-devops-engineer` | CI/CD 流水线、K8s 编排、IaC、可观测性 | | ** Fullstack Engineer ** | `npx skills install peterfei/ai-agent-fullstack-engineer` | 前后端一体化、API 集成、端到端功能实现 | 兼容 Claude Code
Node.jsMIT★ 441No key
Open-source Infrastructure As Code that starts from what already runs. formae discovers your estate, versions drift and hands back current code. A Terraform and Pulumi alternative built on Pkl, with a
MCPLink only★ 775
A curated list of 474 AI tools, agents, MCP servers, and resources for DevOps, SRE, and Platform Engineering — updated July 2026
in the readmeCoding Agents for Infrastructure - AI-Powered Kubernetes - AI-Powered Terraform and IaC - AI Incident Response and Troubleshooting - AI Monitoring and Observability - AI Security Scanning - AI Cost
SkillCC0-1.0★ 39No key
MCP server for AWS infrastructure analysis — DynamoDB, Lambda, SQS, SNS, S3, API Gateway, PostgreSQL, MySQL, MongoDB, Kafka & IaC drift. Works with Claude Code, Cursor, and GitHub Copilot.
Node.jsMIT★ 22No key
Official Alibaba Cloud MCP servers, skills, and plugins to help AI agents build on Alibaba Cloud
in the readmeexecution workflow for Alibaba Cloud infrastructure operations driven by Terraform and IaC Service. ## Repository Layout ```text . ├── plugins/ │ ├── alibabacloud-core/ │ ├── alibabacloud-spec-ops/ │ ├── alibabacloud-agent/ │ └── alibabacloud-data
SkillApache-2.0★ 28No key
Practical MuleSoft recipes — 100+ DataWeave patterns, AI agent integration, CI/CD pipelines, migration guides, and more.
in the readmeRAG, Agentforce, inference, Vibes, AI testing, AI gateway | 63 | | **DevOps** | CI/CD pipelines, IaC, secrets, deployment, testing, observability | 53 | | **Migrations** | Java versions, runtime upgrades, CloudHub, connectors, architecture
SkillMIT★ 42No key
The complete AI operating model for software teams — from first idea to production. Three peer-supervised loops (discovery → build → release) over a catalogue of curated packs: skills, subagents, and
in the skill textcontracts, produce reviewable Terraform, and validate the deployed result with `architect`, `contracts`, `iac-terraform`, and `release-engineering`. - **Software teams:** take a brief or spec through implementation
SkillApache-2.0★ 24No key
A curated collection of AI SecOps 24 SKILL.md capabilities for security work offensive security, SOC and detection engineering, cloud and Kubernetes hardening, DFIR, threat intel, secure programming,
in the skill textSTIX, Sigma, YARA, and blocklists. - `cloud-security-automation`: AWS, Azure, GCP posture, IaC scanning, and drift-and-fix workflows shipped as code, not console clicks. - `detection
SkillMIT★ 24No key
Reusable QA skills for coding agents including Claude Code, Codex, and OpenCode: accessibility, performance, test quality, and more.
in the skill textrisk, leaked secrets, flaky selectors, weak generated tests, dead code, API security, IaC misconfigurations, LLM/agent app risk, or evidence-backed repository audits. **Skill directories:** skills.sh , Smithery
SkillApache-2.0★ 11No key
A curated collection of specialized Claude Code plugins designed to enhance your development workflow with intelligent agents, skills, and commands.
in the skill textThis marketplace provides three comprehensive plugin collections: - **devops-infrastructure**: Infrastructure as Code (IaC), CI/CD pipeline specialists, and database optimization experts for DevOps workflows - **software-engineering**: Code
SkillMIT★ 16No key
Security scanning for CI from one file: SAST, SCA, secrets, IaC and containers, with every finding ranked by exposure, criticality, exploitability and reachability.
GoApache-2.0★ 7No key
⚡ AI Automation Engine
in the readmeinto a single report. | Scanner | What it checks | | ------------- | ------------------------------------------------ | | Trivy | Container images, filesystems, IaC misconfigs | | Gitleaks | Secrets, API keys, tokens in source code | | Checkov | Terraform, CloudFormation, K8s
SkillMIT★ 18No key
Reorg-aware observatory of the Monero network: chain reorganizations, orphan blocks, mining-pool centralization. Public dashboard + API + MCP.
in the readmefor the health of the Monero network: public dashboard + API.   + Zeus (GitOps) agents, ingress→Gateway migration & architecture-diagram painter for Claude Code, Codex CLI, Gemini CLI & Antigravity
SkillLink only★ 10
Skills and plugins to accelerate security workflows with the Orca Cloud Platform
in the skill textand anomalies (actor IS the finding) - CodeOrigins / Shift Left integration — extracts exact IaC source code (repo, file, line numbers, git blame author/commit) - Audit log tracing via
SkillMIT★ 54No key
The AI security agent guards your code.
in the readmescan (Recon → Hypothesize → Analyze → Exploit) | | `scan [path]` | Standard scan (patterns + secrets + deps + IaC + AI) | | `variants [cve-id]` | Find variants of known CVEs in your codebase | | `fix
Node.jsMIT★ 45No key
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
in the readmeCIS Azure Benchmark v2.1 | | GCP Security Review | `skills/cloud/gcp-review/` | CIS GCP Benchmark v2.0 | | IaC Security | `skills/cloud/iac-security/` | OWASP IaC Security, SLSA v1.0 | | Container Security | `skills/cloud/container-security/` | CIS Docker v1.6
SkillMIT★ 85No key
Production-ready AI agent skills for Claude Code, Codex, Cursor, and the Agent Skills Open Standard
in the skill textAsks 6 questions** (one at a time) — repo pattern, platform type, languages, IaC tool, target platform, agent tooling 3. **Shows a summary table** and waits for
SkillMIT★ 11No key
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any agentskills.io agent
in the readmefans out to 8 parallel specialists: vuln detection, authz, secrets, supply chain, IaC, threat-intel, AI-code patterns, business logic | Browse the full catalog in `docs/arsenal.md
SkillApache-2.0★ 12No key
An economical and fuel(token) efficient AI tool, graph session memory for looong chat session
in the readmemerge --source testout --file results.json # jest / pytest / JUnit fish-bridge merge --source iac --path ./ # Terraform / CDK / CloudFormation fish-bridge merge --source openapi --file openapi.yaml fish-bridge
PythonMIT★ 2Few starsNo key
Aforo metering SDKs (Node/Python/Java/Go + GraphQL/gRPC/WebSocket/MQTT + MCP/agent), API gateway plugins (Kong/Apigee/AWS/Azure/MuleSoft), and the EMQX broker plugin — send usage events to Aforo for b
in the readmeOutbound XML/C# policy | | MuleSoft | `aforo-gateway-plugins/mulesoft` | DataWeave custom policy | Plus IaC templates in `aforo-gateway-plugins/aws-cloudformation` and `aforo-gateway-plugins/azure-arm-templates` , and per
Node.jsApache-2.0Few starsNo key
GDPR Shift-Left Compliance MCP Server — Azure-focused GDPR compliance automation.
in the readmeanalyze code patterns, generate DPA checklists ### 🏗️ Infrastructure & Code Review - **Bicep/Terraform/ARM Analyzer** — Scan IaC for GDPR violations (encryption, access, network, residency, logging, retention) - **Application Code Analyzer** — Detect
PythonMIT★ 2Few starsNo key
Who stands behind it
Who stands behind it
