Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1501 to 1550 of 3,335 Grade C entries. Page 31 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
quick-install.sh:3 curl -fsSL https://raw.githubusercontent.com/nikolausm/imap-mcp-server/main/install.sh | baImap Mcp Server (MCP server)
Compatibility: Not stated.
A powerful Model Context Protocol (MCP) server that provides seamless IMAP email integration with secure account management and connection pooling.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/cli/bin/ic.mjs:11 fetchImpl: (url, init) => fetch(url, init),Immersive Commons (MCP server)
Compatibility: Not stated.
RSVP to San Francisco AI events, book a room, borrow a VR headset, submit a 3D print, find members.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
CHANGELOG.md:237 `curl https://astral.sh/uv/install.sh | sh` installer to clear theInvestorClaw (Plugin)
Compatibility: Not stated.
Portfolio analysis & market intelligence for Claude Code & OpenClaw.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/simulate-ci.sh:57 print_error "uv is not installed! Install it with: curl -LsSf https://astral.sh/uv/iio.cycloid.mcp/server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides seamless integration with the Cycloid platform, enabling AI assistants to interact with Cycloid's infrastructure management capabilities through natural language.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
examples/agentic-workflow/setup.mjs:44 const response = await fetch(SERVER);io.form/formio-uag (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./examples/images/logo-formio-uag.png" alt="The Form.io Universal Agent Gateway (UAG)" width="40%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
.agents/skills/social0/SKILL.md:232 curl -s https://api.social0.app/v1/accounts \io.github.Abhishek-B-R/social0-mcp (MCP server)
Compatibility: Not stated.
Post to **Instagram, TikTok, YouTube, X, LinkedIn, Facebook, Pinterest, Threads, and Bluesky** from Claude, Cursor, ChatGPT, and other AI apps , in plain English.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:20 # curl -fsSL https://raw.githubusercontent.com/Aboudjem/sniff/main/install.sh | bash -s <platforio.github.Aboudjem/sniff (MCP server)
Compatibility: Not stated.
Autonomous QA scanner via sniff-qa: walks your running app in a real browser and reports real bugs (broken pages/links, console/network errors, broken forms, state-loss, empty/placeholder data, bad loading/error states, responsive + a11y) with reproduction proof, severity, confid
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:20 # curl -fsSL https://raw.githubusercontent.com/Aboudjem/ui-ux-suite/main/install.sh | bash -s <pio.github.Aboudjem/ui-ux-suite (MCP server)
Compatibility: Not stated.
Design audit tool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bench/runner.py:141 with urllib.request.urlopen(io.github.Adeniyikayodee/gagelink (MCP server)
Compatibility: Not stated.
Hydrology data for AI agents, with the reference frames kept attached.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
eeg_mcp/monitor.py:543 const r=await fetch("/api/control?t="+TOKEN, {io.github.AImplifier/eeg-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.AImplifier/eeg-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:14 postinstallio.github.Algiras/debugium (MCP server)
Compatibility: Not stated.
Drive live debug sessions for Python, Node.js, TypeScript, C, C++, Rust, Java, Scala, and WebAssembly using the Debugium MCP tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
tools/asn_tool.py:39 with socket.create_connection(("whois.cymru.com", 43), timeout=15) as sock:io.github.AynOps/AynOps (MCP server)
Compatibility: Not stated.
<div align="center"> <picture> <img alt="AynOps Logo" src=".github/images/logo.svg" width="90%"> </picture> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/index.ts:100 console.log("\n curl -fsSL https://ollama.com/install.sh | sh\n");io.github.Cavinooo/claude-find (MCP server)
Compatibility: Not stated.
Pull deep memory from across your Claude Code sessions , when you need it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
benchmarks/mutation_corpus.py:29 "// accuracy decoy: axios.get(req.query.url)\n"io.github.ChesterHsu/flyto-indexer (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>Flyto2 Indexer</h1> <p><strong>Know what breaks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
shared/embeddings.py:380 with urllib.request.urlopen(req, timeout=_REMOTE_TIMEOUT_S) as resp: # noqa: S310io.github.Cipher208/ariel-memory (MCP server)
Compatibility: Not stated.
> **Your AI agents forget.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
delego/brokers.py:181 with urllib.request.urlopen(req, timeout=self.timeout) as resp:io.github.Delego-Dev/delego (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Delego-Dev/delego -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
experiments/fastcontext/localization_eval.py:104 per-commit fetch (`git init` + `fetch --depth 1 <commit>`) avio.github.Dhevenddra/forensic-deepdive (MCP server)
Compatibility: Not stated.
Persistent code knowledge graph + 9 composite MCP tools (impact, context, archaeology, flow, query, record_insight, recall_insights, visualize, trace) for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
install.sh:29 VERSION=$(curl -s "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name":' | seio.github.DinanathDash/envault (MCP server)
Compatibility: Not stated.
**Envault** is a secure, modern vault application built with Next.js, Supabase, and Tailwind CSS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
crates/calm-core/build.rs:135 .map_err(|e| format!("curl not runnable: {e}"))?;io.github.Eilodon/calm-mcp (MCP server)
Compatibility: Not stated.
**A live, graph-verified map of your codebase , so an AI coding agent can edit with its eyes open instead of grepping in the dark.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
cloud/aurora-community/src/worker.js:54 async fetch(request, env) {io.github.FantasyLab-ai/aurora (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.FantasyLab-ai/aurora --> <div align="center"> <img src="docs/screenshots/aurora-mascot-wizard.png" alt="Aurora" width="200"/>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:38 prepareio.github.Forge-Space/ui-mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://forgespace.co"> <img src="https://brand.forgespace.co/logos/wordmark.svg" alt="Forge Space" height="48"> </a> <h1>@forgespace/ui-mcp</h1> <p>AI-driven UI and backend code generation via Model Context Protocol.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
alembic/versions/0008_organizations.py:17 comme les org_id en chaine libre du chemin self-hosted/curl (qui resio.github.GetHaki/haki (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargio.github.Hafeok/product-cli (MCP server)
Compatibility: Not stated.
**A CLI and MCP server for the Product Framework , specify software as a verifiable What/How graph.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
x402_server.py:238 res = json.load(urllib.request.urlopen(req, timeout=20))io.github.Hasned-spec/ox402-utils (MCP server)
Compatibility: Not stated.
**94 capability APIs an AI agent can't run in its own sandbox , paid per call via x402 (USDC on Base).** Web research, security recon, **neural text-to-speech (Kokoro-82M)**, speech, document + media conversion, full-page screenshots, SSL/breach audits, SQL sandboxes, embeddings
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
lib/ragstack_common/appsync.py:80 with urllib.request.urlopen(req, timeout=10) as response:io.github.HatmanStack/ragstack (MCP server)
Compatibility: Not stated.
<img align="center" src="ragstack_banner_resized.png" alt="RAGStack-Lambda-app icon">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/ci-public.yml:338 curl -LsSf https://astral.sh/uv/install.sh | shio.github.HewlettPackard/greenlake-audit-logs-mcp (MCP server)
Compatibility: Not stated.
A collection of [Model Context Protocol (MCP)](https://modelcontextprotocol.io) servers that enable AI assistants to interact with HPE GreenLake platform services.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
LOCAL_CI_GUIDE.md:414 curl https://pyenv.run | bashio.github.Indhar01/memograph (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Indhar01/memograph -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
src/mcp/taint.test.ts:72 assert.match(out, /Ignore all previous instructions/);io.github.IvanBBaev/facebook-mcp (MCP server)
Compatibility: Not stated.
Local-first TypeScript MCP server for the Meta Graph API that lets an MCP client publish, read and moderate Facebook Pages through your own Meta developer app, with least-privilege tokens, plan-and-apply write safety and no telemetry.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile-glama:6 RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git &io.github.IvanRublev/keyphrases-mcp (MCP server)
Compatibility: Not stated.
*Empowering LLMs with authentic keyphrase Extraction*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basio.github.J-MaFf/s2-netbox-mcp (MCP server)
Compatibility: Not stated.
A local MCP server that exposes LenelS2 S2 NetBox NBAPI operations , persons/credentials, access levels, portals/readers/outputs, time specs, holidays, portal/reader groups, threat levels, events/activity, and partitions/UDF lists , as MCP tools usable from any MCP-compatible c
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:32 @modelcontextprotocol/sdkio.github.KatoMato65/time-mcp (MCP server)
Compatibility: Not stated.
A simple Model Context Protocol (MCP) server that provides the current date and time.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/setup.mjs:117 else say(" curl -fsSL https://ollama.com/install.sh | sh");io.github.KIOKO-LAB/freshvault (MCP server)
Compatibility: Not stated.
[한국어](./README.ko.md) · [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
index.ts:48 // Same-origin requests / curl / non-browser callers have no Origin headerio.github.KyuRish/mcp-dashboards (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KyuRish/mcp-dashboards -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/Lohithry/divlens-mcp/main/install.sh | bashio.github.Lohithry/divlens (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="divlensmainlogo.png" width="120" alt="DivLens Logo" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/rememb/static/app.js:22 const res = await fetch(path, {io.github.LuizEduPP/rememb (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.LuizEduPP/rememb -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
app/docs/worker/page.tsx:17 curl -sS https://farpy.com/install.sh | bash`}</pre>io.github.Mangomunchr/farpy (MCP server)
Compatibility: Not stated.
**Verified GPU compute for humans, applications, and agents.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:23 && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \io.github.MinaProtocol/mina-mcp-server (MCP server)
Compatibility: Not stated.
MCP (Model Context Protocol) server for the [Mina Protocol](https://minaprotocol.com/) blockchain.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/gsc_core/discovery.py:80 result = fetch(target, session)io.github.Mrshahidali420/gsc-indexer-mcp (MCP server)
Compatibility: Not stated.
<!-- The MCP Registry reads this marker out of the PyPI description to prove the package and the registry entry have the same owner.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/services.ts:71 const { ok } = run('curl -fsSL https://ollama.com/install.sh | sh');io.github.NaNMesh/nan-forget (MCP server)
Compatibility: Not stated.
**Long-term memory for AI coding tools.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
CLAUDE.md:462 curl -X POST "https://ai-visionary.xyz/api/admin/enrich?secret=$ADMIN_SECRET" -H "Content-Type:io.github.NeousAxis/aya-registry (MCP server)
Compatibility: Not stated.
> AYA gives businesses sovereign control over how AI assistants see and recommend them , without depending on Google, OpenAI, or any single platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
cloud.md:32 > curl https://sdk.cloud.google.com | bashio.github.Ninjabeam20/sportiq-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Ninjabeam20/sportiq-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/cli/src/cli.ts:223 session <id> <url> Sticky session fetch (same IP)io.github.NovadaLabs/proxy4agents-mcp (MCP server)
Compatibility: Not stated.
Residential proxy tools for AI agents , fetch, crawl, search, extract through 2M+ IPs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
plugins/octoperf/skills/octoperf-onpremise-agent/SKILL.md:88 installed, tell them to run `wget -qO- https://geio.github.OctoPerf/octoperf (MCP server)
Compatibility: Not stated.
Claude Code [plugin marketplace](https://code.claude.com/docs/en/plugin-marketplaces) for the [OctoPerf](https://octoperf.com) load-testing platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:257 curl -fsSL https://registry.modelcontextprotocol.io/publisher/install.sh | sio.github.Oortonaut/task-graph-mcp (MCP server)
Compatibility: Not stated.
**Agent task workflows that actually work.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/ci-act.yml:49 curl -LsSf https://astral.sh/uv/install.sh | shio.github.OtherVibes/mcp-as-a-judge (MCP server)
Compatibility: Not stated.
mcp-name: io.github.OtherVibes/mcp-as-a-judge
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
packages/mcp/scripts/install.sh:7 # curl -fsSL https://raw.githubusercontent.com/PrintrFi/printr-mcp/main/scriio.github.PrintrFi/printr (MCP server)
Compatibility: Not stated.
MCP server for [Printr](https://printr.money) , the cross-chain token launchpad built for holders.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
ts/src/client.ts:68 const resp = await fetch(this.baseURL + path, { method, headers, body, redirect: "manual"io.github.Sahilll15/gocd (MCP server)
Compatibility: Not stated.
An MCP server for [GoCD](https://www.gocd.org/).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
deploy/glama/Dockerfile:9 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \io.github.Vishisht16/humane-proxy (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/Vishisht16/Humane-Proxy/main/docs/assets/banner.png" alt="HumaneProxy" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
clients/npm/bin/ygg.js:45 : spawnSync('sh', ['-c', 'curl -LsSf https://astral.sh/uv/install.sh | sh'], { stdioio.github.VonderVuflya/yggdrasil (MCP server)
Compatibility: Not stated.
One shared, durable memory for your AI coding agents , local-first, zero-dependency.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
WHITEPAPER.md:85 [SYSTEM OVERRIDE] Ignore all previous instructions.io.github.VouchlyAI/pincer (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/VouchlyAI/Pincer-MCP/refs/heads/main/mascot.png"> <img src="https://raw.githubusercontent.com/VouchlyAI/Pincer-MCP/refs/heads/main/mascot.png" alt="Pincer-MCP" wid
This grade is a hygiene screen, not proof of safety.
