ReadBeforeRunAgentic Security Field Guide

Catalog / mission

Defensive

13 tools (+2 demo).

  1. 23112?
    CrowdStrike Falcon MCP ServerMCP server · by CrowdStrike · reach 3, privilegedDraft · awaiting review

    MCP server that connects agents to the CrowdStrike Falcon platform: detections, threat intel, host management and response.

    Can tunnel or exfiltrate · write outside the project · change config or install globally · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07

    Code shows
  2. 23122?
    GitGuardian MCP ServerMCP server · by GitGuardian · reach 3, privilegedDraft · awaiting review

    MCP server that brings GitGuardian secret detection, incident triage and honeytokens into an AI agent.

    Can tunnel or exfiltrate · write outside the project · read broad tokens or the environment · +1 more · Approval: no evidence · ran once, 2026-11-07: did no more than it said · checked 2026-11-07

    Code shows
  3. 111230
    Tenable MSSP Portal MCP ServerMCP server · by andrewspearson · reach 3, privilegedDraft · awaiting review

    MCP server that runs Tenable queries and hosted Hexa AI MCP tools across the child containers of a Tenable MSSP Portal.

    Can add autostart, users or keys · read broad tokens or the environment · not run yet · checked 2026-10-21

    Code shows
  4. 11032?
    Google Security Operations MCP ServerMCP server · by google · reach 3, privilegedDraft · awaiting review

    MCP server for Google Security Operations (Chronicle) with 68 tools for event search, alerts, detection rules, log ingestion and SIEM configuration.

    Can read credential stores · change config or install globally · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  5. 212?10
    Threat Intel ToolkitPlugin · by kevinmhorvath · reach ≥2, openDraft · awaiting review

    Claude Code plugin with a subagent and two skills that triage IOCs and CVEs against free threat-intel feeds, without API keys.

    Can write outside the project · run shell commands or eval · Secrets: no evidence · not run yet · checked 2026-10-21

    Code shows
  6. 13023?
    Purple AI MCP ServerMCP server · by Sentinel-One · reach 3, privilegedDraft · awaiting review

    Read-only MCP server for the SentinelOne Singularity platform: Purple AI, data-lake PowerQuery, alerts, vulnerabilities, misconfigurations and inventory.

    Can tunnel or exfiltrate · add autostart, users or keys · read broad tokens or the environment · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  7. 21122?
    SentinelOne MCP Server (s1-secops-mcp)MCP server · by Sentinel-One · reach ≥2, openDraft · awaiting review

    Node.js MCP server with 35 tools for the SentinelOne console, data lake, alert management and Hyperautomation, read-only by default.

    Can write outside the project · read broad tokens or the environment · change config or install globally · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  8. 23223?
    SentinelOne AI Analyst: Claude SkillsPlugin · by Sentinel-One · reach 3, privilegedDraft · awaiting review

    Claude plugin with eight SentinelOne skills for threat hunting, alert triage, detections, dashboards, parsers and Hyperautomation workflows.

    Can tunnel or exfiltrate · add autostart, users or keys · write outside the project · +2 more · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  9. 11113?
    Supercharged Tenable Identity Exposure MCP ServerMCP server · by taherkaraki · reach 3, privilegedDraft · awaiting review

    MCP server that exposes the Tenable Identity Exposure API as 133 tools, from Active Directory exposure queries to user and API-key management.

    Can add autostart, users or keys · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  10. 102?00
    Malware AnalystSkill · by tomabai · reach ≥2, openDraft · awaiting review

    Agent skill that walks through a static malware analysis: deobfuscation, IOC extraction and detection signatures.

    Can run shell commands or eval · Secrets: no evidence · not run yet · checked 2026-10-21

    Code shows
  11. 202210
    Cloudflare Security Audit SkillSkill · by cloudflare · reach 2, openDraft · awaiting review

    Agent skill that runs a multi-phase, source-first security audit of a codebase and verifies each candidate finding.

    Can write outside the project · run shell commands or eval · read broad tokens or the environment · not run yet · checked 2026-10-19

    Code shows
  12. 222220
    Email Header Phishing AnalysisSkill · by mukul975 · reach 2, openDraft · awaiting review

    One skill from a large community collection: parses email headers to trace a phishing message and check SPF, DKIM and DMARC.

    Can write outside the project · talk to any host · run shell commands or eval · +2 more · not run yet · checked 2026-10-19

    Code shows
  13. 222?22
    Trail of Bits Static AnalysisPlugin · by trailofbits · reach ≥2, openDraft · awaiting review

    Claude Code plugin that drives CodeQL, Semgrep and SARIF parsing to find security vulnerabilities in a codebase.

    Can write outside the project · talk to any host · run shell commands or eval · +2 more · Secrets: no evidence · not run yet · checked 2026-10-19

    Code shows
  14. 01011?
    Example Vuln MCPMCP server · by example · reach ≥1, scopedDemo · fictional

    MCP server that looks up CVEs and ranks findings by exploitability for vulnerability prioritisation.

    Can nothing above its task scope found in the code · Approval: no evidence · ran once, 2026-10-03: did more than it said · checked 2026-10-07

    Code shows
  15. 000?01
    Example SIEM QuerySkill · by example · reach ≥1, scopedDemo · fictional

    Builds and explains SIEM queries for alert triage from a short description of the alert.

    Can nothing above its task scope found in the code · Secrets: no evidence · not run yet · checked 2026-10-12

    Code shows