Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)

No description yet.

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

The vendor-neutral protocol for AI agent safety & security — and the neutral benchmark that ranks the vendors.

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability research with false positive elimination

lunar.dev: Agent native MCP Gateway for governance and security

Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

No description yet.

No description yet.

Enables Claude to read and manage Apple Business API resources such as devices, device management services, users, groups, apps, blueprints, configurations, and audit events through OAuth 2 authentication. Write and destructive operations are gated behind flags and require a two-step preview-and-confirm flow, with guardrails and local audit logging.

Enables a single owner to connect an MCP client to their own Gmail account over authenticated Streamable HTTP and read status, recent inbox messages, and full message content using their own Google OAuth app and grant.

Exposes explicitly approved local Windows stdio and loopback HTTP MCP backends through a single OAuth-protected remote HTTPS MCP endpoint, letting a mobile AI client invoke whitelisted tools with namespacing, PKCE-based authorization, and per-tool permissions.

Turns any OpenAPI 3.x spec into an MCP server that exposes one validated tool per API operation, so AI agents can discover and call a REST API over stdio or Streamable HTTP. It is read-only by default, with allow/deny lists, environment-based auth, timeouts and response truncation for safe agent access.

Provides OAuth-secured MCP tools for working with private, Git-backed Markdown knowledge bases: searching pages, reading content, ingesting new source documents, retrieving cited original files, and reviewing history or rolling back accepted pages. Every tool call is checked against each person's or agent's current wiki grant and returns source paths and Git revisions for traceability.

Enables auditing GitHub Actions workflows for security problems directly from an MCP client, returning a risk score and findings with file:line evidence, attack narratives, and fixes. Also exposes the full rule catalog and a one-call demo that writes and scans a deliberately broken workflow.

Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Turns a Frappe site into a remote MCP server that AI clients such as Claude can sign in to with OAuth and use curated, task-level tools registered by installed apps. Every call runs as the signed-in user with that user's permissions, with schema-checked arguments and rollback on failure.

Enables AI agents to connect to security cameras, detect objects with YOLOv8, recognize known faces, monitor restricted intrusion zones, capture annotated snapshots, and query a persistent SQLite event history.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.

Enables querying aggregated security news and vulnerability feeds from Claude, with semantic search and filtering by severity, source, or category, plus real-time threat summaries.

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

No description yet.