Loading…
Token Security
Query identities, non-human identities, AI agents, secrets and security findings from Token Security. Read-only, hosted, OAuth sign-in, nothing to run locally.
Created by Token SecurityView Source
Skills4
ai-agent-inventoryList the AI agents, copilots and MCP servers Token Security has observed in the environment, what they access and which identities run them. Use when the user asks "what AI agents do we have", "which agents touch production", or "who is running MCP servers".
identity-blast-radiusFor a user, service account, role, key or other identity, show what it can reach across platforms, who owns it, and how it has been used. Use when the user asks "what can X access", "who owns X", "is X still used", or before offboarding or rotating an identity.
secrets-exposureFind exposed or stale credentials (API keys, tokens, passwords in code, chat or documents) and the identities they belong to. Use when the user asks "do we have leaked keys", "which secrets are in this repo", or "what does this secret unlock".
triage-findingExplain a Token Security finding: what it is, what identities and resources it touches, and what closes it. Use when the user pastes a finding id or title, asks "why is this flagged", or wants a remediation plan for a security issue.
Related plugins
beehiiv
Run your beehiiv newsletter from chat: draft and edit posts, organize subscribers with tags, custom fields, and segments, build automations, and review publication, post, and website performance.
Windmill HR
Connect Cursor to Windmill for performance reviews, feedback, 1:1s, pulse surveys, and more.
TinyFish
Browse and automate the web with TinyFish: run multi-step web automations, search the web, extract clean page content, and drive remote stealth browser sessions.
IFTTT
Bring IFTTT automation into the agent: search hundreds of services, build and manage Applets, and run actions and queries without leaving your editor.
TubeAlfred
TubeAlfred brings YouTube transcripts, comments and channel data into Cursor. No YouTube API key required.
ngrok
ngrok Agent Skills collection: expose localhost, secure endpoints, receive webhooks, and more.