CyberAgents Exchange
by
Provides a community‑driven directory of open‑source AI agents, reusable skills, Model Context Protocol (MCP) servers, and playbooks that enable security teams to discover, share, and chain AI‑powered automation for cybersecurity tasks.
CyberAgents Exchange Overview
What is CyberAgents Exchange about?
CyberAgents Exchange is an open, vendor‑neutral marketplace that indexes four types of cybersecurity AI content – agents, skills, MCP servers, and playbooks – as simple markdown listings with YAML metadata. The actual code lives in the contributors' own repositories, while the exchange serves as the searchable catalog.
How to use CyberAgents Exchange?
- Browse the catalog at https://exchange.tenable.com/browse to find agents, skills, MCP servers, or playbooks.
- Read each listing’s markdown file for description, prerequisites, and usage instructions.
- Contribute a new listing by:
- Forking the repo.
- Adding a markdown file (agents/, skills/, mcp-servers/ or playbooks/) with the required front‑matter.
- Opening a pull request; the built‑in
validator.pyruns automatically to check fields and vocabularies. - After reviewer approval, the listing is published on the website.
- Showcase your contribution with the provided badge in your own project's README.
Key Features
- Four content types – agents, skills, MCP servers, and playbooks – each with a dedicated folder.
- YAML front‑matter schema ensures consistent metadata across listings.
- Automated validation via
validator.pyand GitHub Actions. - Community‑first workflow – PR‑based submissions, contribution agreement, and controlled vocabularies.
- Badge for listed projects to promote visibility.
- Discord, X, and YouTube channels for community support and announcements.
Use Cases
- Security operations teams discovering ready‑made AI agents to automate vulnerability scanning, log analysis, or threat hunting.
- Developers packaging an open‑source security tool as an AI agent and publishing it for broader adoption.
- Organizations building multi‑step security workflows by chaining agents in playbooks.
- Vendors exposing data to agents through MCP servers, enabling seamless integration with the exchange ecosystem.
FAQ
Is this a marketplace? Do agents cost money? No. The exchange is free, open‑source, and does not charge for listing or using agents.
Is the exchange limited to Tenable products? No. It is vendor‑neutral; agents can integrate with any security product.
What is the difference between an agent, a skill, an MCP server, and a playbook? Agents execute security tasks. Skills extend coding assistants with security capabilities. MCP servers expose data streams for agents. Playbooks orchestrate multiple agents into end‑to‑end workflows.
How do I add a new value to the controlled vocabulary?
Edit the appropriate Literal[...] list in validator.py in alphabetical order, then include the change in your PR.
Where can I get help or ask questions? Join the Discord community, follow the X account @CyberAgentEx, or open an issue on the GitHub repository.
CyberAgents Exchange's README
This repository is the content source for the CyberAgents Exchange — a community directory of open-source AI agents, skills, MCP servers, and playbooks for cybersecurity.
Mission
Security teams are experimenting with AI agents. These innovations are happening in silos. CyberAgents Exchange breaks those silos — a community-driven directory where security professionals discover, share, and chain open-source AI agents.
What It Is
CyberAgents Exchange is a directory, not a code host. Listing metadata lives here — the actual agent code lives in contributors' own GitHub repositories. You always get code directly from the author.
The exchange indexes four types of content:
| Type | What it is | Directory |
|---|---|---|
| Agents | AI agents and tools that automate security tasks | agents/ |
| Skills | Reusable agent skills that extend AI coding assistants with security capabilities | skills/ |
| MCP Servers | Model Context Protocol servers for agent connectivity | mcp-servers/ |
| Playbooks | Multi-agent workflows that chain agents together into end-to-end security processes | playbooks/ |
Browse everything at exchange.tenable.com/browse.
How It Works
Each listing is a single markdown file: YAML frontmatter holding the metadata, and a markdown body describing the project. Contributors submit listings via pull request. Agents are vendor-neutral and run anywhere — not locked to a single platform or license.
When a PR opens, validator.py runs automatically to check required fields, controlled vocabularies, and file placement. Two maintainers then review against the contributing checklist. Merged listings are published to the website on the next build.
Contributing
Read CONTRIBUTING.md before you submit. It covers repository requirements, the Contribution Agreement, frontmatter reference for every listing type, and what reviewers check.
Anyone can contribute. The fastest path is the CyberAgents Exchange Submission Builder skill for Claude Code — install it, run /cyberagents-exchange-submit from your project directory, and it validates your repo, gathers metadata, generates the listing, and opens the PR. It takes about five minutes.
Prefer to do it by hand? Start from a template in templates/ and follow the manual submission steps.
Before you start, your project needs:
- A public GitHub repository owned by a personal account (not an EMU account)
- An open-source license — MIT recommended, Apache 2.0 also welcome
- No secrets anywhere in the git history
- A README covering purpose, prerequisites, how to run it, outputs, and known limitations
See the Contribute page for a walkthrough.
Show It Off
Once your listing goes live, add this badge to your README to showcase your contribution.
[](https://exchange.tenable.com/)
Also, every contributor gets a profile page at exchange.tenable.com/contributors/<your-github-handle>!
<a href="https://exchange.tenable.com/"><img src="https://img.shields.io/badge/CyberAgents%20Exchange-Listed-E7FF00?style=flat-square&labelColor=1E2426" alt="Listed on CyberAgents Exchange"></a>
Repository Layout
agents/ One markdown file per agent listing
skills/ One markdown file per skill listing
mcp-servers/ One markdown file per MCP server listing
playbooks/ One markdown file per playbook listing
templates/ Starter templates for each listing type
docs/ Contribution Agreement, reviewer checklist
validator.py Schema + controlled-vocabulary validation
validator.py is the source of truth for allowed field values. To propose a new integration, platform, or client, add it in alphabetical order to the relevant Literal[...] list and include the change in your listing PR — see Adding to the Controlled Vocabulary.
Running the validator locally
uv sync
uv run ./validator.py
Optionally install the pre-commit hooks so validation runs on every commit:
uv run pre-commit install
FAQ
Is this a marketplace? Do agents cost money? No. The exchange is free and open-source. There are no fees to list or use agents. All code is hosted on contributors' public GitHub repositories.
Is this only for Tenable products? No. The exchange is vendor-neutral. Agents can integrate with any security product — Tenable, CrowdStrike, SentinelOne, or anything else. Best on Tenable One, but built for all.
What's the difference between an agent, a skill, an MCP server, and a playbook? In short: agents run tasks, skills extend coding assistants, MCP servers expose data to agents, and playbooks chain agents into multi-step workflows. Full definitions are in CONTRIBUTING.md.
Who's behind this? CyberAgents Exchange is built and maintained by Tenable's Agentic AI Accelerator practice. Tenable provides the platform, review infrastructure, and flagship agents — the community provides the ecosystem.
More at exchange.tenable.com/about.
Questions & Support
- Community chat — join us on Discord for questions, help, and what's landing next
- General questions — visit exchange.tenable.com
- Issues & feature requests — open a GitHub issue
- Security concerns with a listed contribution — reach out to the repository owner; if needed, use GitHub Security Advisories
Come hang out on Discord, and follow along on X and YouTube.
Listings are licensed by their respective authors — check each linked repository for its license. See SECURITY.md and the CyberAgents Contribution Agreement.
CyberAgents Exchange Reviews
Login Required
Please log in to share your review and rating for this MCP.
Similar MCP Servers like CyberAgents Exchange
Explore related MCPs that share similar capabilities and solve comparable challenges
SafeLine
by chaitin
A self‑hosted web application firewall and reverse proxy that protects web applications from attacks and exploits by filtering, monitoring, and blocking malicious HTTP/S traffic.
AiSOC
by beenuar
Ingests security telemetry, normalizes it, runs a large library of detection rules, correlates alerts, and leverages AI agents for triage and investigation while recording every prompt, tool call, and decision in an immutable ledger.
Snyk Agent Scan
by snyk
Scans installed AI agent components, MCP servers, and skill files for prompt‑injection, tool poisoning, toxic flows, hard‑coded secrets and other supply‑chain risks.
OpenOSINT
by OpenOSINT
Provides an AI‑driven OSINT workflow that lets users query a natural‑language REPL, CLI, web UI, or MCP server, automatically selecting and chaining 18 reconnaissance tools to collect, pivot, verify, and report public‑source intelligence.
Reverify
by 2akouwu
Provides deterministic verification of AI‑generated claims against binary artifacts, ensuring every structural or behavioral assertion is grounded in the actual file and preserving verified state across context resets.
Hol Guard
by hashgraph-online
Open-source antivirus for AI agents that blocks risky tools, secret exposure, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
SafeDep Vet
by safedep
Provides enterprise‑grade open source software supply chain security by scanning source code, dependencies, containers and SBOMs, detecting vulnerabilities and malicious packages, and enforcing policy as code.
Ssh Mcp Server
by tufantunc
Provides controlled SSH access for LLM agents with command classification, policy‑based authorization, human‑in‑the‑loop approval, and immutable audit logging.
Semgrep MCP Server
by semgrep
Offers an MCP server that lets LLMs, agents, and IDEs run Semgrep scans to detect security vulnerabilities in source code.