"Strategies for enhancing coding efficiency with cursor agent optimization" matching MCP servers:

Enables MCP clients to run local scans for known AI coding-assistant backdoor indicators and risky Claude Code/MCP configuration patterns, returning findings directly in chat.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

A proof-of-concept attack that exploits Model Context Protocol (MCP) tool registration to achieve persistent agent poisoning in AI assistants like Cursor, embedding malicious instructions that persist across chat contexts without requiring tool execution.

Screens AI agent tool calls before execution and tool results before the agent reads them, acting as an MCP proxy and hooks adapter with shadow, enforce, and strict policy modes.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

Enables role-based order management through MCP tools, allowing users to view and refund orders according to their permissions (USER, MANAGER, ADMIN) with audit logging and JWT authentication handled by a FastAPI client.

Provides tools to issue, verify, and export cryptographically signed receipts for AI agent actions, enabling tamper-proof audit trails for compliance with regulations like the EU AI Act.

Registers a set of inert, tempting decoy tools with any MCP-capable client so that any call from a hijacked or prompt-injected agent instantly raises an alert with full attack context and a per-call trace token. Also plants worthless canary tokens in honeypot files that trigger zero-false-positive leak alerts when they surface in agent output, files, or outbound requests.

Enables AI agents to access authenticated websites by reusing your existing browser profile and cookies, so you never share passwords and sessions persist between runs.

Local static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.

Cryptographic accountability for AI agents. Ed25519-signed receipts for every MCP tool call. Constraints, chains, AI judgment, invoicing, and local dashboard included.

Verify-before-act safety tools for AI coding agents, providing MCP tools to check packages, lockfiles, manifests, and CI workflows for supply chain risks.

Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows.

Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.

Enables AI agents to securely store and retrieve secrets and make authenticated API calls on their behalf, keeping API keys out of conversation context and supporting local file or GCP Secret Manager backends.

MCP server for AI agent guardrails — validates and signs agent decisions (OAA tokens) so third parties can verify them without server access

A neutral authority layer for agent runtimes, providing sovereign verification and vault-governed custody tools via MCP.

Guardrails for AI coding agents that enforces rules via compliance receipts, blocking destructive actions and syncing rules across all AI tools.

agent-bom is an open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. The default scan profile in MCP server mode exposes 8 MCP tools. Additional profiles provide inventory, findings, compliance, graph, and runtime workflows. See the published Glama release for its packaged version.

Enables coding agents to send files and notes into approved Zas channels and read items back, with content encrypted before leaving the machine and scoped, revocable agent access.

Enables AI coding agents to run Kubernetes inspection and Terraform plan/apply operations inside ephemeral gVisor-sandboxed jobs with short-lived, narrowly-scoped credentials, while routing destructive changes through a human approval gate.

Enables governed access to corporate Postgres databases via MCP, supporting read-only queries, confirmed data and schema changes, query explanation, audit trail retrieval, and role-based policies with optional Vault secret integration.

Enables AI agent tool calls to be intercepted and judged before execution, allowing, asking a human, or blocking based on calibrated risk and policy.

Pay-per-call MCP and x402 v2 server on Base USDC providing 19 keyless tools for AI agents: web extraction, social and academic search, B2B lead and domain intelligence, npm/PyPI package and smart-contract security audits, OFAC compliance screening, and DeFi swap quotes

Open end-to-end encrypted messaging protocol and MCP server (a4a-mcp) that gives AI agents a cryptographic address (apub1...) to exchange messages, tasks, and signed agreements directly across NAT without port forwarding.

Cryptographic identity and trust protocol for AI agents. 38 MCP tools across 8 protocol layers: Ed25519 identity, delegation chains, values compliance, signed communication, policy engine, task coordination, cross-layer integration, and agentic commerce. 264 tests passing.

Enables AI agents to send, receive, verify, approve, and delegate signed, proof-carrying requests across organisations using delegation chains, replay protection, quorum approvals, and tamper-evident receipts.

Provides a zero-install security baseline for AI coding agents, with tools to retrieve curated security rules and check actions against them for self-correction.

Enables AI agents to control a Linux desktop and browser through governed tools for mouse, keyboard, windows, clipboard, screenshots, navigation, and page interaction, with policy verdicts, human confirmation, secret redaction, and an append-only audit trail.

Enables authenticated clients to call a streamable HTTP MCP endpoint with a whoami tool, providing identity lookup for authenticated sessions.