Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 651 to 700 of 3,335 Grade C entries. Page 14 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:17 prepareio.github.FastAlertNow/mcp-server (MCP server)
Compatibility: Not stated.
Official Model Context Protocol (MCP) server for [FastAlert](https://fastalert.now).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
go-server/main.go:183 cmd := exec.CommandContext(ctx, cfg.cliPath, "sts", "get-caller-identity", "--output", "io.github.FerhatDundar/aws-mcp-connector (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
go-server/main.go:201 cmd := exec.CommandContext(ctx, cfg.cliPath, "auth", "status")io.github.FerhatDundar/ghcli-mcp-connector (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
test-subjective.cjs:372 const req = https.request({io.github.Finanzgoblin/spectra-mcp-server (MCP server)
Compatibility: Not stated.
Multi-protocol yield intelligence for AI agents , covering [Spectra Finance](https://spectra.finance), [Pendle](https://pendle.finance), and [Morpho](https://morpho.org) via the [Model Context Protocol](https://modelcontextprotocol.io).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
calibratge/calibra.py:94 r = subprocess.run(io.github.FixemBCN/mcp-bifrost (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.FixemBCN/mcp-bifrost -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
local-docs/src/plesk_local_docs_mcp/database.py:200 shutil.rmtree(child)io.github.FlayedOne/plesk-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.FlayedOne/plesk-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareio.github.Flightradar24/fr24api-mcp (MCP server)
Compatibility: Not stated.
This [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server provides access to the Flightradar24 API for real-time and historical flight data.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:20 prepareio.github.FlywheelStudio/ulink (MCP server)
Compatibility: Not stated.
> Connect your Ulinkly deep linking projects to Claude Code, Cursor, Windsurf, and other AI assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:34 prepareio.github.Forge-Space/branding-mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://forgespace.co"> <img src="https://brand.forgespace.co/logos/wordmark.svg" alt="Forge Space" height="48"> </a> <h1>@forgespace/branding-mcp</h1> <p>AI-powered brand identity generation via MCP , part of the <a href="https://github.com/Forge-S
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:52 prepareio.github.Goingparabolic/oak-longevity-mcp-server (MCP server)
Compatibility: Not stated.
> An [MCP](https://modelcontextprotocol.io) server for **longevity & metabolic medicine** , a medication catalog, evidence-based dosing protocols, contraindication screening, drug-interaction checks, required baseline labs, ongoing monitoring plans, FDA/compounding regulatory st
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/cloud-operator/antigravity/install.sh:106 command -v curl >/dev/null 2>&1 || die "curl is needed to doio.github.GoogleCloudPlatform/gemini-cloud-assist-mcp (MCP server)
Compatibility: Not stated.
> [!IMPORTANT] > **Private Preview Notice** > The Gemini Cloud Assist MCP server APIs are currently in Private Preview and are behind an allowlist.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
README.md:266 curl -sL https://raw.githubusercontent.com/HaD0Yun/Gopeak-godot-mcp/main/install-addon.sh | bashio.github.HaD0Yun/gopeak (MCP server)
Compatibility: Not stated.
🌐 **Languages**: **English** | [한국어](README-ko.md) | [日本語](README-ja.md) | [Deutsch](README-de.md) | [Português](README-pt_BR.md) | [简体中文](README-zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:20 prepareio.github.HeroSizy/cucumberstudio (MCP server)
Compatibility: Not stated.
> *Vibe Coded with Claude Code and Pu-Er 🍵*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
lib/jar-runner.js:100 fs.unlinkSync(tmp);io.github.HuynhKhanh1402/dejared (MCP server)
Compatibility: Not stated.
Java decompiler and JAR analyzer.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:53 prepareio.github.HYPD-AI/openai-ads-mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server for the **OpenAI Ads (Advertiser) API**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/db_conn_mcp/doctor.py:336 inside = subprocess.run(io.github.Idle-Sync/db-conn-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Idle-Sync/db-conn-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:20 prepareio.github.InnarM/blank-invoice-maker (MCP server)
Compatibility: Not stated.
An [MCP](https://modelcontextprotocol.io) server that lets any AI assistant (Claude, and other MCP clients) create invoices with **[Blank Invoice Maker](https://blankinvoicemaker.com)** , the free, no-signup, no-watermark invoice generator.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/api/oauth2/filestore.ts:389 await fs.unlink(tmpPath).catch(() => undefined);io.github.IvanBBaev/x-mcp-ai (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
package.json:52 @clack/promptsio.github.Ivy-Innovation/cubelife (MCP server)
Compatibility: Not stated.
Give your AI agent a living pixel-art companion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
src/dashboard.ts:132 function getJSON(url) { return fetch(url).then(function (r) { return r.json(); }); }io.github.JasonCZMeng/assay (MCP server)
Compatibility: Not stated.
**The quality oracle for the x402 agent economy** , [x402](https://www.x402.org/) being the open protocol that lets machines pay for HTTP APIs with stablecoin micropayments.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:43 prepareio.github.JigSawFr/eurodns-mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/simulation.py:866 subprocess.check_call([sys.executable, "-m", "pip", "install", "--user", "--break-syio.github.JKHeadley/moltbridge (MCP server)
Compatibility: Not stated.
**Professional network intelligence for AI agents.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:51 prepareio.github.JoernBerkefeld/mcp-server-mcdev (MCP server)
Compatibility: Not stated.
MCP (Model Context Protocol) server for **[Accenture SFMC DevTools](https://github.com/Accenture/sfmc-devtools)** (`mcdev`): search the project wiki offline, learn `.mcdevrc.json` concepts (markets, `marketList`, `createDeltaPkg`, validations), walk component checklists (e.g.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:39 prepareio.github.JoJoLaBagarre/france-travail-mcp (MCP server)
Compatibility: Not stated.
> Serveur **MCP (Model Context Protocol)** pour les **API officielles de France Travail** : offres d'emploi, référentiel des métiers **ROME 4.0**, prédiction **ROMEO**, et entreprises qui recrutent (**La Bonne Boîte**).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
src/chabbat.ts:120 const resp = await fetch(ANTHROPIC_URL, {io.github.JonathanB555/torah-mcp (MCP server)
Compatibility: Not stated.
**A source discipline for Claude** , never quote Torah from model memory.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:25 prepareio.github.JustinBeckwith/gongio-mcp (MCP server)
Compatibility: Not stated.
<img src="gong.png" alt="A cute red panda hitting a gong" width="300" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:23 prepareio.github.JustinBeckwith/linkinator-mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides link checking capabilities using [linkinator](https://github.com/JustinBeckwith/linkinator).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:27 prepareio.github.JustinBeckwith/pylon-mcp (MCP server)
Compatibility: Not stated.
<img src="https://raw.githubusercontent.com/justinbeckwith/pylon-mcp/main/pylon-mcp.png" alt="pylon-mcp" width="400" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:45 postinstallio.github.JXUE0/opencut-controller (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.png" width="150" alt="OpenCut Controller Logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
mcp_google_forms.py:45 CREDENTIALS_PATH = CONFIG_DIR / "credentials.json"io.github.KamaruSama/mcp-google-forms (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KamaruSama/mcp-google-forms -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
mcp_screenshot.py:51 geometry = subprocess.check_output(["slurp"], text=True).strip()io.github.KamaruSama/mcp-screenshot (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KamaruSama/mcp-screenshot -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
mcp_sudo.py:93 result = subprocess.run(io.github.KamaruSama/mcp-sudo (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KamaruSama/mcp-sudo -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
weboperator-bridge/bridge.js:33 fs.unlinkSync(PID_FILE);io.github.KazKozDev/weboperator (MCP server)
Compatibility: Not stated.
Tell Chrome what you want done, in plain English, and let the agent do it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:55 credentials.jsonio.github.KmOnBeIbI31/verifactu-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KmOnBeIbI31/verifactu-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
test.js:344 try { fs.unlinkSync(mcpScript); } catch (_) {}io.github.KryptosAI/agent-observability (MCP server)
Compatibility: Not stated.
> Open source agent observability , see what your agents did, why they failed, and what it cost.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
README.md:85 io/kryptosai/mcp-observatory:latest` · `curl -fsSL https://raw.githubusercontent.com/KryptosAI/mcio.github.KryptosAI/mcp-observatory (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/mcp-observatory-logo.png" alt="MCP Observatory" width="482"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:46 prepareio.github.Libres-coder/parseflow (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
MicroPython/cleanup.py:12 os.remove(fp)io.github.LofiFren/picocalc-mcp (MCP server)
Compatibility: Not stated.
A MicroPython firmware and script collection for the Clockwork Pi PicoCalc handheld device, powered by the **Raspberry Pi Pico 2W**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:38 prepareio.github.Lyellr88/buddy-mcp (MCP server)
Compatibility: Not stated.
> **Status: Archived / Historical** > > The official Claude Code `/buddy` feature was a limited-time April Fools Easter egg (April 1-7, 2026).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:26 prepareio.github.MarvelNwachukwu/mcp-pear (MCP server)
Compatibility: Not stated.
**The Pear Protocol MCP server for Hyperliquid pair trading** , connect Claude, Cursor, or any AI agent to on-chain perps: browse pair markets, read positions and portfolio, and (opt-in) execute pair trades.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
packages/node/src/config.ts:114 fs.unlinkSync(file);io.github.Massed-Compute/mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Massed-Compute/mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:9 postinstallio.github.MastadoonPrime/agent-memory (MCP server)
Compatibility: Not stated.
Persistent, encrypted memory service for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:15 prepareio.github.MetaBrain-Labs/comfyui-mcp-server (MCP server)
Compatibility: Not stated.
<p align="center"> [<a href="./README.md">简体中文</a>] [<a href="./README-en.md">ENGLISH</a>] </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
benchmarks/run_benchmarks.py:61 subprocess.run(io.github.Mibayy/token-savior (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Mibayy/token-savior -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
app/page.tsx:323 const res = await fetch('/api/waitlist', {io.github.MintwareDevelopers/mcp-server (MCP server)
Compatibility: Not stated.
Public repository mintwaredevelopers/mintware-beta.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/auth.ts:103 const res = await fetch(url, {io.github.MK3Core/flickr-mcp (MCP server)
Compatibility: Not stated.
An MCP server that gives AI assistants authenticated access to your Flickr photo library.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:6 preinstallio.github.Mnymann/nordic-data (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io/) server that gives AI agents (Claude, Cursor, Claude Code, ChatGPT, Copilot, etc.) direct access to **official European business data** across **15 European countries**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/anti-slop-e2e.mjs:147 fs.rmSync(fixtureDir, { recursive: true, force: true });io.github.ModelBound/modelbound-mcp (MCP server)
Compatibility: Not stated.
> Local-first MCP server for agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:33 postinstallio.github.Mogacode-ma/elementor-mcp-agent (MCP server)
Compatibility: Not stated.
> **Agency-grade MCP server for WordPress Elementor.** Multi-site management, safe Elementor edits with backup + auto-rollback + CSS flush, template export/import, global widget detection, screenshots, WP-CLI escape hatch.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:67 postinstallio.github.Mogacode-ma/infomaniak-mcp-agent (MCP server)
Compatibility: Not stated.
> **Drive your entire [Infomaniak](https://www.infomaniak.com) account from [Claude](https://www.anthropic.com/claude) , agentic, two-phase commit, open-source.**
This grade is a hygiene screen, not proof of safety.
