Browse the library

An awesome list providing comprehensive resources and considerations for Model Context Protocol (MCP) security, including best practices for servers and clients.

Local safety gate and memory for agents that blocks destructive commands like rm -rf via a PreToolUse hook and traces failures to their root cause.

A secure runtime for AI agents that enforces English-language security policies to prevent unauthorized file or network access.

Authority gate that checks approvals before an agent's protected tool runs, binding approval to exact details like amount and destination, with verifiable evidence.

This toolkit provides Claude Code plugins to transform technical evidence into GRC compliance artifacts like gap reports, remediation guidance, and OSCAL workflows.

This plugin provides security controls for AI agents, enforcing policies, scanning vulnerabilities, and tracking drift to prevent unintended actions.

This plugin offers a spec-driven offensive security framework for Claude Code, including kill-chain skills, collaborative agents, and a vulnerability reference library.

Provides essential security rules for Cursor to enforce safe coding practices and prevent sensitive operations in AI-assisted development.

This plugin acts as a security layer for AI agents, intercepting tool calls like shell commands, file writes, and web requests to protect against dangerous actions.

This CLI scans AI agent skills, MCP server configs, and IDE rule files to detect security threats, privacy violations, and instruction-level attacks.

This tool runs AI coding agents like Claude Code inside a bubblewrap sandbox, limiting their access to only the current working directory for enhanced security.