DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.

Claude Code plugin for Divi 5 development (current: Divi 5.13). Slash commands and agents for selector lookup, CSS generation and validation, page-section scaffolding, project CSS audits, responsive, accessibility and Core Web Vitals checks, error diagnosis, and a self-refreshing Divi knowledge base.

Plan, apply and roll back changes to a production ontology, with a blast radius report and a proof an auditor can re-check.

Real-time monitoring, slowlog analysis, and audit trails for Valkey and Redis

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

DataNexa is a local, read-only database MCP gateway for AI agents. It routes SQLite, MySQL, PostgreSQL, and any JDBC-compatible database through a single localhost endpoint, enforces read-only access via SQL AST validation with row, time, and connection limits, and keeps a local audit trail of every query.

Craft-first interface design for dashboards, admin panels, SaaS apps, tools, settings pages, data interfaces, and interactive products. Use when designing, building, reviewing, auditing, or refining product UI where visual craft, layout hierarchy, tokens, states, visual direction, or design-system c

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables AI assistants to operate Shopify stores through 61 risk-tiered tools for store operations, SEO and GEO audits, deterministic analytics, inventory intelligence, feed quality, and safe marketing workflows. It defaults to read-only access and uses previews, bound approvals, and audit logging for writes.

Enables Claude to administer a Mailcow installation and analyze Postfix delivery logs for per-provider sending reputation, including snapshots, delivery breakdowns, warmup status, and authentication audits.

Enables Claude to operate a Hetzner estate end to end — Cloud servers, Cloudflare and Hetzner DNS, SSH hosts, and Coolify deployments, plus multi-step recipes — through 53 tools. Writes are dry-run until confirmed, protected servers refuse destructive calls, and every call is audited with secrets masked.

Enables Cursor and Codex agents to audit Agent Skill structure (frontmatter, broken links, missing files), analyze dependencies for undeclared, unused or vulnerable packages via OSV, and run 28 local bug and code-quality rules with SonarQube-style A–E ratings. It can also optionally pull issues, metrics and quality-gate status from SonarQube or SonarCloud, or scan and upload results.

Enables AI agents to make policy-scoped payments with spending caps, recipient allowlists, approval thresholds, instant revocation, and an append-only audit trail in a sandbox wallet.

Free, rules-based checks for e-commerce product pages: AI shopping readiness (structured data, reviews, return and shipping terms, GTINs, AI crawler access), Google Merchant Center compliance, store SEO audit and Shopify checkout deadlines. No AI calls, nothing stored.

Turns any OpenAPI spec into a single-tool MCP server where the model writes JavaScript against a typed api object in a QuickJS sandbox, so multi-step tasks run in one round trip and only the final result reaches context. Credentials, rate limiting, retries, write gating and audit logging stay on the host, outside the sandbox.

Enables MCP clients to create and control persistent, PTY-backed terminal sessions on macOS: launch commands and interactive programs, read output incrementally via byte cursors, send keystrokes, wait on conditions, and detect running/awaiting-input/exited states. Sessions run inside a Seatbelt sandbox with command policies, human approvals, secret redaction, and hash-chained audit logging.

Enables AI agents to run Meta (Facebook and Instagram) advertising: pull spend, CPA, ROAS and breakdown reports, audit account health, build and boost campaigns, ad sets and ads, and pause or adjust budgets, all starting paused until the user approves going live. Also supports brand memory, change logs and an optional daily spend cap.

Enables agents to probe URLs and classify bot-wall responses with vendor and signal evidence, perform offline classification, scan for exposed key-like material, and run owner-side access audits through stdio tools.

Enables teams to access every enabled MCP tool through one authenticated URL, with per-user attribution and audit logging, from MCP clients or a dashboard chat agent.

Enables Claude and other MCP clients to query live online-store product, order, sales, stock, and customer data in plain English, with secure read-only defaults, masked customer information, capped results, and audit logging.

Enables AI agents to reach enterprise apps such as Jira, Microsoft 365, Salesforce, FedEx and Dell TechDirect, or your own REST APIs, through a single self-hosted MCP endpoint. Each agent gets its own key with per-app, per-value grants and a confirmation step for deletes, so calls are scoped and audited without exposing app credentials.

Enables comprehensive genealogy research and editing on Geni.com through its REST API, including reading family trees and ancestors, managing profiles, sources, media, projects, and lists, with configurable write safeguards, audit logging, and rate-limit handling.

Enables MCP-capable AI agents to invoke 38 deterministic, private, auditable compute tools over stdio, covering PII masking, finance schedules, health, text, units, media, business, gaming, and scheduling without network access or dependencies.