Security Bypass

Enchant creature
As long as enchanted creature is attacking alone, it can't be blocked.
Enchanted creature has "Whenever this creature deals combat damage to a player, it connives." (Its controller draws a card, then discards a card. If they discarded a nonland card, they put a +1/+1 counter on this creature.)

Royal Treatment

Target creature you control gains hexproof until end of turn. Create a Royal Role token attached to that creature. (If you control another Role on it, put that one into the graveyard. Enchanted creature gets +1/+1 and has ward {1}.)

Island

Combat Research

Enchant creature
Enchanted creature has "Whenever this creature deals combat damage to a player, draw a card."
As long as enchanted creature is legendary, it gets +1/+1 and has ward {1}. (Whenever enchanted creature becomes the target of a spell or ability an opponent controls, counter it unless that player pays {1}.)

Saiba Cryptomancer

Flash
Backup 1 (When this creature enters the battlefield, put a +1/+1 counter on target creature. If that's another creature, it gains the following ability until end of turn.)
Hexproof

Cradle of Safety

Flash
Enchant creature you control
When Cradle of Safety enters the battlefield, enchanted creature gains hexproof until end of turn. (It can't be the target of spells or abilities your opponents control.)
Enchanted creature gets +1/+1.

Tanglespan Lookout

Whenever an Aura enters the battlefield under your control, draw a card.

Mercurial Spelldancer

Mercurial Spelldancer can't be blocked.
Whenever you cast a noncreature spell, put an oil counter on Mercurial Spelldancer.
Whenever Mercurial Spelldancer deals combat damage to a player, you may remove two oil counters from it. If you do, when you next cast an instant or sorcery spell this turn, copy that spell. You may choose new targets for the copy.

Ivy, Gleeful Spellthief

Flying
Whenever a player casts a spell that targets only a single creature other than Ivy, Gleeful Spellthief, you may copy that spell. The copy targets Ivy. (A copy of an Aura spell becomes a token.)

Seafaring Werewolf

Seafaring Werewolf can't be blocked.
Whenever Seafaring Werewolf deals combat damage to a player, draw a card.
Nightbound (If a player casts at least two spells during their own turn, it becomes day next turn.)

Suspicious Stowaway

Suspicious Stowaway can't be blocked.
Whenever Suspicious Stowaway deals combat damage to a player, draw a card, then discard a card.
Daybound (If a player casts no spells during their own turn, it becomes night next turn.)

Suspicious Stowaway // Seafaring Werewolf

Forest

Shore Up

Target creature you control gets +1/+1 and gains hexproof until end of turn. Untap it. (It can't be the target of spells or abilities your opponents control.)

Audacity

Enchant creature
Enchanted creature gets +2/+0 and has trample.
When Audacity is put into a graveyard from the battlefield, draw a card.

Grove's Bounty

Distribute X +1/+1 counters among any number of target creatures you control. (Then exile this card. You may cast the creature later from exile.)

Elusive Otter

Prowess (Whenever you cast a noncreature spell, this creature gets +1/+1 until end of turn.)
Creatures with power less than Elusive Otter's power can't block it.