Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.

Enables querying aggregated security news and vulnerability feeds from Claude, with semantic search and filtering by severity, source, or category, plus real-time threat summaries.

Enables agents to retrieve structured, pre-published readings of the current geopolitical-risk picture, with in-band freshness and staleness metadata, through a no-auth read-only endpoint.

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Swiss Ephemeris 7-Wisdoms & 4-Elements deterministic oracle (<1.5ms, Zero-Auth, Rule 14).

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.

Security auditor for AI agent configurations. Scans Claude Code setups for vulnerabilities, misconfigs, and injection risks.

Stop AI agents from doing things you didn't ask for.

PYA (Protect Your Ass): security audit plugin for Claude Code. 9 specialist agents, a dated threat feed, verified findings, offline by default.

Agent skills for squirrelscan, the website QA tool for your coding agent (300+ audit rules).

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

The community-driven Claude Code plugin marketplace for MSPs — 70+ plugins across PSA, RMM, security, documentation, and accounting, plus cross-vendor industry workflow packs (ops, security, finance, compliance, sales, DevOps, cloud infra) that compose whatever tools you have connected.

Detects prompt injection by its effect on a sacrificial canary model, not just pattern matching: untrusted input hits a powerless model first, a behavioral check reads the residue, and it returns block, flag, or pass before your primary model acts. Inbound preflight sensor, not a guarantee.

All-in-One malware analysis tool.

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.

🦾 MONSTER ENGINEER v2 - Ultimate AI CLI with 63 Skills, 12 Superpowers, 14 Agents. Multi-Agent Orchestration, Cost-Aware, Security Scorecard, Parallel-First.

A security scanner for your LLM agentic workflows

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!

Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Check any agent skill or MCP server's security verdict before your agent installs it. Sandbox-based 0-100 verdicts (Verified, Caution, Blocked). Free, read-only, no account.