Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 601 to 650 of 3,335 Grade C entries. Page 13 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/capacitor-mcp (MCP server)
Compatibility: Not stated.
Unofficial MCP server for the official [Capacitor](https://capacitorjs.com) documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/ionic-framework-mcp (MCP server)
Compatibility: Not stated.
Unofficial MCP server for the official [Ionic Framework](https://ionicframework.com) documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/mcp (MCP server)
Compatibility: Not stated.
The official MCP server for [Capawesome](https://capawesome.io).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/buy-oracle.mjs:48 fetch(url, {io.github.0rkz/byte-protocol (MCP server)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/inquisitor/backend/analyzer.py:222 result = subprocess.run(io.github.1111111111111111111114oLvT2/inquisitor (MCP server)
Compatibility: Not stated.
Hypothesis-driven problem solving for AI agents: probe, falsify, escalate , never blind-retry.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
src/cli.test.ts:23 fs.rmSync(dir, { recursive: true, force: true })io.github.1gr14/agents-party (MCP server)
Compatibility: Not stated.
/party , one channel where your agent sessions talk to each other: Claude Code, Cursor, Codex or any other agent, on one machine or across machines.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
src/budget.test.ts:26 fs.unlinkSync(stateFile);io.github.1lystore/mcp-server (MCP server)
Compatibility: Not stated.
MCP server for [1ly.store](https://1ly.store) , Enable AI agents to discover, pay for, and sell APIs using crypto.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
auto_collect_upload.py:151 os.system(f"{sys.executable} -m pip install python-dotenv -q")io.github.365xbusiness/vigo-mcp (MCP server)
Compatibility: Not stated.
> **Regulatory Intelligence Expert · Bilingual AI Agent for Hong Kong SFC Regulations** > > *By [OrphicOne](https://orphicone.com) · English & 繁體中文 · Continuously Updated Knowledge Base*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/repiscope/privacy.py:19 "id_rsa", "id_dsa", "id_ecdsa", "id_ed25519",io.github.3xpr1ment/repiscope (MCP server)
Compatibility: Not stated.
**A periscope for your repos , see everything, touch nothing.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/remediation/providers.ts:381 "Never paste tokens directly into curl commands. Use environment variables inio.github.78degrees/ghosthunt (MCP server)
Compatibility: Not stated.
Find every leaked secret on your machine.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareio.github.AccelByte/ags-extend-sdk-mcp-server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that gives AI assistants (VS Code Copilot, Cursor, Claude, Gemini, Antigravity) the AccelByte Extend SDK as additional context , so they can answer questions about the SDK and generate correct Extend SDK code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:14 prepareio.github.Advertflair/threadmap-mcp (MCP server)
Compatibility: Not stated.
**Conversation drift visualization and forking for Claude.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
showcase/playground.js:238 const resp = await fetch("/health", { method: "GET", signal: AbortSignal.timeout(20io.github.Aimino-Tech/opentalk2html-notmd (MCP server)
Compatibility: Not stated.
> **AI talks to you through beautiful pages , not overwhelming markdown dumps.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
.claude/rules/pytest.md:71 subprocess.run(["git", "init"], cwd=tmp_path, check=True, capture_output=True)io.github.Alberto-Codes/docvet (MCP server)
Compatibility: Not stated.
Real-time docstring quality diagnostics for Python files
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:14 prepareio.github.AmanMakesStuff/mappls-mcp (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server for [Mappls](https://maps.mappls.com) , India's own maps platform (MapMyIndia).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
web/webmcp.js:21 var response = await fetch(path, { headers: Object.assign({ accept: "application/json" }, heaio.github.ANAMIZED/yodmcp (MCP server)
Compatibility: Not stated.
**YodMCP** is a production-oriented **Agent Operating System** kernel on MCP: multi-graph memory, Tasks, Skills, A2A, attestation (software / simulated TEE), OpenTelemetry, and plan-based monetization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:24 prepareio.github.Antonytm/mcp-sitecore-server (MCP server)
Compatibility: Not stated.
This repository contains the source code for the Sitecore Community MCP server , an open-source [Model Context Protocol](https://modelcontextprotocol.io) server that gives AI agents direct read/write access to Sitecore, so you stop copy-pasting between your agent and the Content
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/index.js:43 const res = await fetch(url, opts);io.github.ARCXS-Protocol/mcp-server (MCP server)
Compatibility: Not stated.
**ARCXS Protocol MCP Server** , Universal agent registry, discovery, and cross-protocol messaging for any MCP-compatible AI agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
README.md:30 `okay, could u check disk usage on /root/ path with help of safe-ssh-mcp server on a remote myserio.github.Areso/safe-ssh-mcp (MCP server)
Compatibility: Not stated.
A secure and scoped SSH MCP server for executing read-only diagnostic commands over SSH.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
requirements.txt:1 mcp>=1.0.0io.github.ArkTechNWA/zsh-tool (MCP server)
Compatibility: Not stated.
Zsh shell for Claude Code - full terminal control, live output, PTY mode for interactive commands
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:30 prepareio.github.AryanBV/pdf-toolkit-mcp (MCP server)
Compatibility: Not stated.
> 💼 Available for freelance MCP/AI integration work , DM [@aryansalian03](https://x.com/aryansalian03) or via [aryanbv.com](https://aryanbv.com)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/client.ts:80 return await fetch(this.config.url + path, { ...init, signal: controller.signal });io.github.Asif2BD/umami-mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) server for [Umami Analytics](https://umami.is).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
bench/saber_eval.py:217 subprocess.run(["git", "-C", str(cwd), *args], capture_output=True, check=False)io.github.Atharva-Jayappa/blast-scope (MCP server)
Compatibility: Not stated.
Scores the blast radius of a shell command before your agent runs it , advisory, never blocking.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:18 prepareio.github.AutomateLab-tech/content-distribution (MCP server)
Compatibility: Not stated.
Use when the user wants to publish a post, article, or announcement to multiple platforms at once , DEV.to, Hashnode, GitHub Discussions, Reddit, Bluesky, LinkedIn, Medium, or Twitter/X.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:21 prepareio.github.Automattic/simplenote-mcp (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server that gives any MCP-compatible AI tool access to your [Simplenote](https://simplenote.com/) data , read by default, with opt-in write tools (create, update, trash, restore, revert) when you run `simplenote-mcp setup` with write mode enabled.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
cli/src/http.ts:48 res = await fetch(url, {io.github.AvivK5498/agenthook (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
api/agent/sweep.ts:75 const res = await fetch(`${ESTATE_URL}/${path}`, {io.github.Bahamas1717/aibvf-mcp (MCP server)
Compatibility: Not stated.
Turn an AI proposal into a decision brief: the verdict, the evidence gaps and the next action for the person who owns the work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
package.json:55 @modelcontextprotocol/sdkio.github.Baneado98/cloud-pathfinder (MCP server)
Compatibility: Not stated.
**Attack-path auditor for Infrastructure-as-Code , Terraform, CloudFormation, Kubernetes, CDK, Pulumi, Bicep/ARM.** Not a linter.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
package.json:18 prepareio.github.Berckan/bugherd-mcp (MCP server)
Compatibility: Not stated.
> **Note:** This is an unofficial, community-maintained, open-source (MIT) BugHerd MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:18 prepareio.github.BitmapAsset/dear-agent (MCP server)
Compatibility: Not stated.
Keep the user's personal life diary for them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:42 prepareio.github.BlazingCDN/blazingcdn-mcp (MCP server)
Compatibility: Not stated.
Official [Model Context Protocol](https://modelcontextprotocol.io) server for [BlazingCDN](https://blazingcdn.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
docs/DESIGN.md:208 | **Tool poisoning / line-jumping / rug pull** | Tool descriptions enter LLM context at `toio.github.Blite-HQ/qnexus-mcp (MCP server)
Compatibility: Not stated.
A community [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server for **Quantinuum Nexus**, wrapping the official [`qnexus`](https://github.com/Quantinuum/qnexus) Python SDK so any MCP-speaking agent (Claude Code, Cursor, VS Code, Codex, …) can inspect Nexus and,
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
hashnode-post-4074524-building-an-ai-shopping-agent-that-actually-buys-things-11b.md:86 result = subprocess.ruio.github.BuyWhere/buywhere-mcp (MCP server)
Compatibility: Not stated.
> **AI agents use BuyWhere to search products, compare prices, and discover deals across Singapore and US merchants in real time.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:15 prepareio.github.Coinversaa/mcp-server (MCP server)
Compatibility: Not stated.
Read-only crypto intelligence for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:53 credentials.jsonio.github.Combjellyshen/zotero-bridge (MCP server)
Compatibility: Not stated.
<p align="right"> <b>🇨🇳 简体中文</b> | <a href="README-en.md">🇬🇧 English</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:19 prepareio.github.Coolver/home-assistant-mcp (MCP server)
Compatibility: Not stated.
> ⚙️ This MCP server works together with the > [Home Assistant Vibecode Agent](https://github.com/Coolver/home-assistant-vibecode-agent), > installed as a Home Assistant add-on.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:23 postinstallio.github.Creed-Space/creedspace-mcp-server (MCP server)
Compatibility: Not stated.
Universal MCP server for Creed Space - AI safety guardrails in 10 seconds.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
src/windows_mcp/__main__.py:894 mkcert = subprocess.run(["where", "mkcert"], capture_output=True).returncode =io.github.CursorTouch/Windows-MCP (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>🪟 Windows-MCP</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
benchmark/bootstrapbench/cleanup.mjs:87 if (apply) fs.rmSync(dir, { recursive: true, force: true });io.github.DanielBlomma/cortex (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/logo.png" alt="Cortex" width="600" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/metrics.py:82 out = subprocess.run(io.github.DanielTomaro13/sportsdata-mcp (MCP server)
Compatibility: Not stated.
**Ask your AI which bookmaker is paying more , and get a real answer.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:13 prepareio.github.DeanWard/HAL (MCP server)
Compatibility: Not stated.
HAL is a Model Context Protocol (MCP) server that provides HTTP API capabilities to Large Language Models.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/server.e2e.spec.ts:306 fs.rmSync(tempDir, { recursive: true, force: true });io.github.Digital-Defiance/mcp-screenshot (MCP server)
Compatibility: Not stated.
**Give AI agents visual superpowers to see, analyze, and document your applications like senior UX designers.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
docs/demo/record-demo.sh:6 # curl -sSL -o ~/.local/bin/agg \io.github.Doucs91/hivelore (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://github.com/Doucs91/hivelore"> <img src="https://raw.githubusercontent.com/Doucs91/hivelore/main/packages/vscode/media/logo.svg" alt="Hivelore logo" width="96" /> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/tools.test.ts:5 // Mock child_process.spawnio.github.DownAtTheBottomOfTheMoleHole/infracost (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.downatthebottomofthemolehole/infracost -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:13 prepareio.github.DynamicDeals/gunsnation (MCP server)
Compatibility: Not stated.
The Gunsnation MCP Server is a lightweight integration layer that exposes the Gunsnation firearms catalog to AI assistants through the Model Context Protocol (MCP).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/whitelist.ts:237 template: 'timeout 3 curl -sS -o /dev/null -w "HTTP:%{http_code}" {probe} 2>&1; echo " EXio.github.Easton-OU/rootpilot-ssh-diagnose (MCP server)
Compatibility: Not stated.
> This is the open-source, bring-your-own-LLM taste of [RootPilot](https://rootpilotx.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:30 postinstallio.github.EthanAckerman-git/preflight-ios-mcp (MCP server)
Compatibility: Not stated.
The most comprehensive MCP (Model Context Protocol) server for iOS Simulator automation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
clients/typescript/src/index.ts:43 /** Override fetch (e.g. node-fetch in older Node, MSW in tests). */io.github.EvidInvest/aether-developer (MCP server)
Compatibility: Not stated.
The search engine whose user is an agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
scripts/verify-python-package.py:117 return subprocess.run(command, cwd=ROOT, capture_output=True, text=True)io.github.Evilander/audrey (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="docs/assets/audrey-wordmark.png" alt="Audrey" width="720">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
REGISTRY_PUBLISH.md:77 rm -f ~/.config/mcp-publisher/credentials.json 2>/dev/nullio.github.Fabio662/yieldagentx402 (MCP server)
Compatibility: Not stated.
> **Policy-gated, receipt-backed x402 execution for AI agents** , ShadeGuard before funds move, TEE-attested runs, verifiable proof.
This grade is a hygiene screen, not proof of safety.
