C
cyberdroid2077/opsecforge-tools
no SECURITY.md
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
- Copy the command above
- Paste it as one entry under
mcpServersinclaude_desktop_config.json— local servers take command + args (example: clients) - Restart your client
Install command from the repository
claude mcp add opsecforge -- npx -y opsecforge-mcp
Parsed from the README we fetched on 2026-10-26; we have not executed it.
This is the install method the repository states, not an MCP client config, so no JSON is generated.
Key names differ by client: Clients & CLI
- Star count
- 0 ★ · cyberdroid2077/opsecforge-tools · read from the GitHub search API · (checked 2026-11-13 20:00:50)
- Source
- collected from the punkpeye/awesome-mcp-servers list · type: MCP server
- Harvest history
- first seen 2026-10-23 · last seen 2026-11-14 · seen 26× · listed by 23 sources
- Score
- score 2,300 · 23 sources · mcp
- Install
claude mcp add opsecforge -- npx -y opsecforge-mcp
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
claude mcp add opsecforge -- npx -y opsecforge-mcp. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
cyberdroid2077/opsecforge-tools；first catalogued 2026-10-23；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.# OpsecForge
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
OpsecForge is a Next.js site for privacy-first developer and security utilities. Its core product boundary is simple: values pasted into a tool are processed in the loaded browser page, not sent to an OpsecForge tool-processing backend.
## MCP server for coding agents: opsecforge-mcp
This repository also contains a local Model Context Protocol (MCP) server in packages/opsecforge-mcp. It runs over stdio, is built with the official MCP TypeScript SDK (@modelcontextprotocol/sdk), and reuses the same tested code in lib/ that powers the browser tools. It makes no network requests.
The agent passes a file path or an environment variable name; the work happens on your machine and only redacted or derived results reach the model. MCP tools:
redactfile: read a local text file and return it with secrets replaced by [REDACTED], plus a findings summary.
scansecrets: pre-commit check of files, directories or staged changes; returns file:line and the secret type, never the value.
redacttext, verifywebhook, inspectjwt, filechecksum.
Install from npm (opsecforge-mcp, MIT; official MCP Registry name io.github.cyberdroid2077/opsecforge):
bash
claude mcp add opsecforge -- npx -y opsecforge-mcp
Redaction is heuristic. Setup for Codex, Cursor and the Claude Code plugin (with a guard hook), plus the full limitations, is in the package README and at opsecforge.com/agents.
## Privacy and analytics boundary
Tool inputs and generated outputs are not sent to OpsecForge analytics.
The public site uses aggregate Vercel Web Analytics for page-view measurement.
The site may load advertising resources.
Browser-local processing reduces an upload path; it does not make tool output correct, safe, or compliant by itself.
Each security-sensitive tool should state its limitations and require appropriate human review.
Never add logging, storage, analytics, error reporting, or network calls that can contain tool input, secrets, tokens, signatures, or generated credentials.
## Tools
### Try a real workflow
Compare a file checksum: select a file up to 32 MiB, calculate SHA-256 or SHA-512, and compare a trusted publisher's digest. No file upload. A match does not prove the file is safe or authenticate its publisher.
Sanitize a configuration before sharing: mask likely secrets in synthetic test data first. Detection is heuristic; review all output.
Check a webhook signature: compare supplied GitHub, Stripe, or generic HMAC fixtures. Matching supplied values does not replace a production receiver's replay controls.
For a reproducible checksum demo, create a text file containing exactly abc with no newline. Its SHA-256 is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad. Change one byte and the digest changes. File names, bytes, and digests are not included in analytics. Campaign labels on the public README link describe the distribution channel only.
The /tools hub groups the current utilities into:
Encoding and formatting
Credentials and security
Debugging and validation
## MCP server for coding agents: opsecforge-mcp
This repository also contains a local Model Context Protocol (MCP) server in packages/opsecforge-mcp. It runs over stdio, is built with the official MCP TypeScript SDK (@modelcontextprotocol/sdk), and reuses the same tested code in lib/ that powers the browser tools. It makes no network requests.
The agent passes a file path or an environment variable name; the work happens on your machine and only redacted or derived results reach the model. MCP tools:
redactfile: read a local text file and return it with secrets replaced by [REDACTED], plus a findings summary.
scansecrets: pre-commit check of files, directories or staged changes; returns file:line and the secret type, never the value.
redacttext, verifywebhook, inspectjwt, filechecksum.
Install from npm (opsecforge-mcp, MIT; official MCP Registry name io.github.cyberdroid2077/opsecforge):
bash
claude mcp add opsecforge -- npx -y opsecforge-mcp
Redaction is heuristic. Setup for Codex, Cursor and the Claude Code plugin (with a guard hook), plus the full limitations, is in the package README and at opsecforge.com/agents.
## Privacy and analytics boundary
Tool inputs and generated outputs are not sent to OpsecForge analytics.
The public site uses aggregate Vercel Web Analytics for page-view measurement.
The site may load advertising resources.
Browser-local processing reduces an upload path; it does not make tool output correct, safe, or compliant by itself.
Each security-sensitive tool should state its limitations and require appropriate human review.
Never add logging, storage, analytics, error reporting, or network calls that can contain tool input, secrets, tokens, signatures, or generated credentials.
## Tools
### Try a real workflow
Compare a file checksum: select a file up to 32 MiB, calculate SHA-256 or SHA-512, and compare a trusted publisher's digest. No file upload. A match does not prove the file is safe or authenticate its publisher.
Sanitize a configuration before sharing: mask likely secrets in synthetic test data first. Detection is heuristic; review all output.
Check a webhook signature: compare supplied GitHub, Stripe, or generic HMAC fixtures. Matching supplied values does not replace a production receiver's replay controls.
For a reproducible checksum demo, create a text file containing exactly abc with no newline. Its SHA-256 is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad. Change one byte and the digest changes. File names, bytes, and digests are not included in analytics. Campaign labels on the public README link describe the distribution channel only.
The /tools hub groups the current utilities into:
Encoding and formatting
Credentials and security
Debugging and validation
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/cyberdroid2077-opsecforge-tools-tree-main-packages-opsecforge-mcp/)
- Source
- awesome · https://github.com/cyberdroid2077/opsecforge-tools/tree/main/packages/
- Browse by field
- MCP servers
- Listed by
- 23 independent sources
- added
- today
- Security policy
- no
SECURITY.mdat the repository root (which does not mean it is unsafe)
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.