Grade Claude Code, Gemini CLI and Cursor configs for risky permissions; get public config stats.

Claude Code plugin: scope-aware protection — allows destructive ops (rm, mv, chmod) within project, blocks them outside. Built for dangerouslySkipPermissions mode.

⚡ Lara Dashboard - CMS by Laravel - All In One solution to start your Laravel Application from Basic to Enterprise. Manages Users, Roles, Permissions, Modules, Settings, Translations, Contents, Monitoring and every actions of your Laravel application. Complete solution for Laravel application with Tailwind, Livewire, Rest API, Unit-Tests and more.

Access gate for AI coding harnesses (DSH plugin + Claude Code hook): per-directory deny/read/full, roster groups, audit log, model-facing tools with owner-approved widening.

不把整台机器交出去，只送出挡路的决定和下一步：DeepSeek Harness 的审批、ask_user_question 提问与结果回复，以飞书卡片发到手机——桌面优先、只出站；执行过程实时可见，下一段任务一键即开。

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authe

Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or handling _notice JSON.

Claude Code plugin: use ChatGPT (Codex), Cursor, OpenCode Zen, and Antigravity models inside one Claude Code session. Switch with /model, delegate to named native workers, keep each provider's own login and permissions.

Clerk Organizations for B2B and multi-tenant apps - org switching, roles and permissions, verified domains, and enterprise SSO. Use for team workspaces, RBAC, org-scoped routing, member management. Also load this when a project treats teams, workspaces, tenants, or companies as its customers - share

Connects AI agents to a user's mailbox with OAuth-scoped permissions, enabling email sending, inbox management, verification-email capture for tests, and migration from Resend.

Provides a local MCP bridge to an end-to-end encrypted personal vault, enabling connected agents to search and save memories, manage accounts and credentials, access personal information and private addresses, and honor granular user permissions.

Enables AI assistants to answer natural-language questions about environmental monitoring stations, returning real-time readings, hourly time-series, and combined station overviews. Supports per-user account binding and OAuth 2.1 authorization so each user only sees stations within their own permissions.

Enables Claude, Cursor and other AI tools to read your resumes, saved job postings and application records, and with write access to save new jobs and applications, through your own API key and with read-only or read-write permissions.

Agent plugin for major harnesses — DeepSeek Harness (DSH), OpenCode, Pi and Codex: define custom AI agent roles with per-role prompts, models, skills, permissions, memory and multi-agent orchestration.

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.｜基于 DeepSeek Harness 的开源 GrokBot 平替：有长期记忆的个人 AI Bot 团队，支持多 Bot 协作、身份权限与插件生态扩展。MIT.

为 DeepSeek Harness 提供电脑控制插件：新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入（目前支持macos）｜Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.

Enables MCP hosts to spawn, supervise, and collect results from parallel panels of pinned-model OpenCode v2 agents for delegated tasks, reviews, and cross-model comparisons. Supports per-member roles, models, permissions, follow-up prompts, cancellation, and persisted result retrieval.

Enables Claude and Cursor to search a team's synced Slack, GitHub and Notion content through permission-aware hybrid search with citations, retrieve a source document with its review and comment thread, and query time-aware knowledge graph facts when the graph is enabled. Every tool call runs with the signed-in user's permissions, so the assistant sees exactly what that user can see.

Enables AI agents to read messages from user-approved WhatsApp chats via a blocking long-poll tool and send signed replies to chats where the user has explicitly allowed responses. Permissions, watch/reply switches, and a live feed of everything the agent sees and sends are managed through a local web UI.

Enables AI clients to securely access and manage IMAP mailboxes through OAuth-protected tools for searching, reading, organizing, flagging, moving, and deleting emails or folders, with optional write permissions.

Enables users to search songs, play liked music or playlists, control playback and volume, and query playback status and timestamped lyrics using their own account and membership permissions.