Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

Caura (formerly MemClaw) — governed shared memory for AI agent fleets. Multi-agent, multi-tenant, MCP-native. Trust tiers, keystone policies, audit trails, knowledge graph, self-improving retrieval. Apache 2.0.

Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.

Claude Code plugin for Divi 5 development (current: Divi 5.13). Slash commands and agents for selector lookup, CSS generation and validation, page-section scaffolding, project CSS audits, responsive, accessibility and Core Web Vitals checks, error diagnosis, and a self-refreshing Divi knowledge base.

DataNexa is a local, read-only database MCP gateway for AI agents. It routes SQLite, MySQL, PostgreSQL, and any JDBC-compatible database through a single localhost endpoint, enforces read-only access via SQL AST validation with row, time, and connection limits, and keeps a local audit trail of every query.

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables Cursor and Codex agents to audit Agent Skill structure (frontmatter, broken links, missing files), analyze dependencies for undeclared, unused or vulnerable packages via OSV, and run 28 local bug and code-quality rules with SonarQube-style A–E ratings. It can also optionally pull issues, metrics and quality-gate status from SonarQube or SonarCloud, or scan and upload results.

Enables AI agents to make policy-scoped payments with spending caps, recipient allowlists, approval thresholds, instant revocation, and an append-only audit trail in a sandbox wallet.

Enables AI agents to run Meta (Facebook and Instagram) advertising: pull spend, CPA, ROAS and breakdown reports, audit account health, build and boost campaigns, ad sets and ads, and pause or adjust budgets, all starting paused until the user approves going live. Also supports brand memory, change logs and an optional daily spend cap.

Enables agents to probe URLs and classify bot-wall responses with vendor and signal evidence, perform offline classification, scan for exposed key-like material, and run owner-side access audits through stdio tools.

Enables teams to access every enabled MCP tool through one authenticated URL, with per-user attribution and audit logging, from MCP clients or a dashboard chat agent.

Enables AI agents to reach enterprise apps such as Jira, Microsoft 365, Salesforce, FedEx and Dell TechDirect, or your own REST APIs, through a single self-hosted MCP endpoint. Each agent gets its own key with per-app, per-value grants and a confirmation step for deletes, so calls are scoped and audited without exposing app credentials.

Enables MCP-capable AI agents to invoke 38 deterministic, private, auditable compute tools over stdio, covering PII masking, finance schedules, health, text, units, media, business, gaming, and scheduling without network access or dependencies.

Enables coding agents to surgically harvest licensed upstream code, scaffold adapters behind canonical contracts, audit seams, verify live behavior, and promote or mount proven components while preserving the host architecture.

Enables AI agents to read and write a local-first Markdown/Obsidian notebook via a single capture call that routes text into the right notebook, board, or daily journal entry and returns related notes, alongside search, note and card management, and numeric metric series. Access is governed by per-agent tokens with read/write/admin scopes, optional folder restrictions, and an audit log of every action.

Enables AI agents to import and refresh product feeds, edit products, write rules, run optimization and audits, connect ad channels, set performance labels, and create product ad creatives.

Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.

177 tools for AI agents. Turn Chrome into an MCP server — inspect DOM, automate clicks, audit security, mock APIs, extract data, download videos, schedule agents, monitor pages, self-improving recipes, full API collection management, business intelligence

CLI for the Guren framework: scaffolding (make:*, add), migrations, codegen, and the check, audit and gate commands a coding agent runs to verify its work.

Enables an AI agent to sign, verify, encrypt, decrypt, and manage OpenPGP keys while private key material stays in gpg-agent and passphrases go only to pinentry. Adds human approval for high-risk operations, typed-fingerprint confirmation for destructive ones, and audit logging that never records plaintext.

Enables AI agents and assistants to inspect live system telemetry, check TCP port connectivity, audit environment variables for leaked secrets, analyze and summarize log files, and list Docker containers — all with token-efficient, compressed output.

Enables developers to register custom tool-calling functions, execute path-safe file operations within an isolated workspace, and keep in-memory memory and audit state for AI agent workflows.

Enables MCP-compatible agents to calculate Davis-Bacon/CWHSSA overtime, run 26 deterministic WH-347 compliance audits with penalty exposure, and compile pixel-aligned official DOL WH-347 PDF packets.