Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Enables checking whether a crypto link is a phishing lookalike of a wallet, exchange or dapp by comparing it against official domains and flagging lookalike characters, typosquats, punycode and bait words, fully offline. An optional paid full check adds domain registration age, DNS, redirect tracing and a page scan for seed-phrase prompts and drainer code.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.