🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.

MCP server for SSH: let Claude Code, Codex and any MCP client run commands, transfer files and manage servers over SSH, with human approval, an encrypted vault and a live audit trail. Desktop app and CLI included.

Audit trail and traceability for AI agents. See what every coding agent did, block risky calls, ask a human for approval, and prove it with signed trust checks.

Can AI engines cite your site, and do they? Free 0–100 readiness score on an open GEO rubric, plus ask and weekly citation tracking via OpenAI, Perplexity, Gemini, Anthropic and OpenRouter with your own keys. Zero dependencies; CLI, GitHub Action and MCP server.

Your AI can write the UI. This makes sure it writes your UI. A deterministic scanner scores your design system 0-100 against 119 public repos, reads React and web components (Stencil, Lit), hands you a copy-paste fix prompt for each top finding, writes ru

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.

Supercharge AI Agents, Safely

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.

Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediation, Chrome extension. MIT, Playwright, Node 20+.

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

The governed memory brain for AI agents: one local memory for Claude Code, Codex, Cursor, Copilot, ChatGPT and any MCP client. Honest recall, documents and pictures, roles, audit and GDPR erasure.

Enables coding agents to audit projects locally for token waste, calculate model arbitrage and pricing alternatives, and make request bodies cache-friendly, with payload optimization sending the supplied request body to the TokenZero service.

Connects MCP-compatible clients and CI pipelines to a hosted endpoint exposing tools for SaaS revenue-leak audits, ghost-usage evaluation, EU VAT validation, B2B net-terms reconciliation, webhook signature verification and replay simulation, dispute-evidence staging/linting, and ROI calculation.

Engineering decisions, change impact, documentation audits, and CI evidence for coding assistants.

Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables MCP clients to create and control persistent, PTY-backed terminal sessions on macOS: launch commands and interactive programs, read output incrementally via byte cursors, send keystrokes, wait on conditions, and detect running/awaiting-input/exited states. Sessions run inside a Seatbelt sandbox with command policies, human approvals, secret redaction, and hash-chained audit logging.

Enables teams to access every enabled MCP tool through one authenticated URL, with per-user attribution and audit logging, from MCP clients or a dashboard chat agent.

Enables Claude and other MCP clients to query live online-store product, order, sales, stock, and customer data in plain English, with secure read-only defaults, masked customer information, capped results, and audit logging.

Enables coding agents to surgically harvest licensed upstream code, scaffold adapters behind canonical contracts, audit seams, verify live behavior, and promote or mount proven components while preserving the host architecture.

177 tools for AI agents. Turn Chrome into an MCP server — inspect DOM, automate clicks, audit security, mock APIs, extract data, download videos, schedule agents, monitor pages, self-improving recipes, full API collection management, business intelligence

Enables AI clients to build, solve and inspect LS-DYNA analyses, either by driving Ansys Mechanical through PyMechanical or by submitting and monitoring standalone keyword-deck runs. It also reads and audits solver output files such as glstat, binout, d3plot and ASCII histories, with results comparison and deck checks.

Enables AI clients and CLI users to query and modify multiple MySQL data sources routed by project and environment, with explicit environment binding, server-side read-only enforcement, hot-reloaded web configuration, and SQL execution auditing.