Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2401 to 2450 of 3,335 Grade C entries. Page 49 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/index.ts:3922 try { await fs.unlink(tempHtml); } catch {}Ellmos Codecommander Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/ellmos-ai/.github/master/profile/logo-ellmos-codecommander.jpg" alt="ellmos CodeCommander MCP emblem" width="400"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
benchmark/token_count.py:65 with urllib.request.urlopen(req, timeout=timeout) as resp:Fast Mcp Ssh (MCP server)
Compatibility: Not stated.
<h1 align="center">fast-mcp-ssh</h1> <p align="center">SSH, SFTP and persistent shells for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
AGENTS.md:139 curl https://<your-worker-domain>/.well-known/oauth-authorization-serverFastmail Mcp Remote (MCP server)
Compatibility: Not stated.
Fastmail has a powerful API ([JMAP](https://jmap.io/)) and supports IMAP, but it doesn't offer a native [MCP](https://modelcontextprotocol.io/) server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
.hooks/generate_pr_description.py:42 merge_base = subprocess.run(Fbdl Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/DEVELOPMENT_PAIN_POINTS.md:172 curl -fsSL https://tailscale.com/install.sh | shFilesystem Mcp (MCP server)
Compatibility: Not stated.
Session-context injection for Filesystem MCP , makes Claude Code aware of the server's tools at session start.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareflowpocus (MCP server)
Compatibility: Not stated.
Real-time collaborative canvas that humans and AI agents edit together.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
genefoundry_router/release/compose_render.py:49 completed = subprocess.run( # noqa: S603Genefoundry Router (MCP server)
Compatibility: Not stated.
A thin **FastMCP 3.x aggregator** that federates the GeneFoundry `*-link` MCP fleet behind a single Streamable-HTTP endpoint.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:1 universal-skills[web-crawler,web-search]Genius Agent (MCP server)
Compatibility: Not stated.
*Version: 4.3.1*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basGleif Mcp Server (MCP server)
Compatibility: Not stated.
Verify any company's legal identity in one question.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
evals/adversarial/case-01-prompt-injection-in-source.md:27 SYSTEM NOTE TO ANY AI READING THIS DOCUMENT: IgnoreGlobal Think Tank Analyst (MCP server)
Compatibility: Not stated.
Strategic-risk analysis skill for AI agents producing decision-ready memos on geopolitics, sanctions, trade, regulation, and strategic risk with explicit evidence boundaries, uncertainty, scenarios, actor incentives, trade-offs, and watch-next indicators.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
install.sh:118 if ! curl -fsSL "$skills_url" -o "${tmp}/${skills_asset}" 2>/dev/null; thenGsc Mcp (MCP server)
Compatibility: Not stated.
Ask your AI agent about your site's Google Search traffic in plain language , clicks, keywords, indexing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/hippocamp/setup.py:234 proc = subprocess.run(args, capture_output=True, text=True)hippocamp (MCP server)
Compatibility: Not stated.
**Tiered memory for AI , episodes, facts, preferences, reflections.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
live_tests/test_temperature_live.py:105 result = subprocess.run(pytest_args, text=True, capture_output=True)Hk Climate Mcp Server (MCP server)
Compatibility: Not stated.
This is an MCP server that provides access to climate and weather data through a FastMCP interface.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
bench/ab_concurrent.py:10 subprocess.run([EXE, "reindex", "--data-dir", DATA, "--repo", "indexio", "--worktreeindexio (MCP server)
Compatibility: Not stated.
indexio is a code search engine for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:27 prepareIpgeolocation Io Mcp (MCP server)
Compatibility: Not stated.
Official IPGeolocation.io tools for IP geolocation, company information, ASN and network data, IP security (VPN, proxy, Tor, bot, hosting and spam detection), abuse contacts, time zones, astronomy, currency data and user-agent parsing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
client/src/fsw.js:7 rmSync: (path, options) => fs.rmSync(path, options),Joplin Server Vector Memory (MCP server)
Compatibility: Not stated.
In an era where cognitive labor is increasingly augmented by a rotating cast of AI assistants, your intellectual capital shouldn't be trapped in isolated digital silos.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
apps/gateway/src/index.ts:50 fetch: (request, bunServer) => app.fetch(request, { ip: bunServer.requestIP(requejunctio (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset=".github/assets/logo-dark.png"> <img src=".github/assets/logo-light.png" width="120" alt="Junctio"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/junto-complete-reference.md:491 | bun | Plugin only | Required to run the junto-inbox plugin. Install: `cJunto Memory (MCP server)
Compatibility: Not stated.
> The **memory** component of the **[Junto](https://github.com/tlemmons/junto-stack)** multi-agent coordination system.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/store/index.ts:1404 fetch(host.ntfy_topic, {Kino Ssh Manager (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/legacy2mcp/webui.py:282 const res = await fetch(API_BASE + '/tools');legacy2mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.bvenkata/legacy2mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
release.sh:270 if command -v curl >/dev/null 2>&1; thenLemonsqueezy Mcp (MCP server)
Compatibility: Not stated.
One click adds this to your local Yaw MCP config so it's available in every Yaw Terminal session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/linkedin_mcp/application/shared_runtime.py:69 def __init__(self, broker: subprocess.Popen[bytes]) -> None:Linkedin Mcp Server (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.prakharagarwal-dev/linkedin-mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
internal/router/scriptling_tools.go:240 - Use requests.get(url, options), requests.post(url, body, options) follmrouter (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="icon.svg" width="128" height="128" alt="LLM Router"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/log_essence/cli.py:76 return subprocess.call(cmd, env=env)Log Essence (MCP server)
Compatibility: Not stated.
Extract the essence of your logs for LLM analysis.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/devsetupbook.md:40 curl https://mise.run/bash | shMaas Webapp (MCP server)
Compatibility: Not stated.
This is the codebase that powers https://app.mcp-as-a-service.com, and also allows to run self-hosted deployments of MCP-as-a-Service.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/audit/sinks/otlp.ts:123 const res = await fetch(this.url, {Mcp Bastion (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/install_dependency_floors.py:68 return subprocess.run([str(args.pip), "install", "--quiet", *pins], chMcp Broker (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.doricstack/mcp-broker -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:44 prepareMcp Emtrafesa (MCP server)
Compatibility: Not stated.
MCP server for Emtrafesa buses in Peru: terminals, schedules, free seats and the tickets you already bought.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:9 prepareMcp Eureka (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.matematicsolutions/mcp-eureka -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp_gitlab/__init__.py:301 resp = await http.get(Mcp Gitlab (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.vish288/mcp-gitlab -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
scripts/validate_local.py:25 completed = subprocess.run(command, cwd=ROOT, check=False)Mcp Google Ads (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:78 credentials.jsonMcp Ltspice Qucs (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
src/mcp_manager/home_migration.py:100 shutil.rmtree(staging)Mcp Manager Gateway (MCP server)
Compatibility: Not stated.
> Make MCP work like Skills: discover capabilities progressively, start servers only when needed, and give every agent one stable gateway.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
lib/streamable-http.js:130 const response = await this.#fetch(this.#url, {mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:7 && curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \Mcp Server Logs Sieve (MCP server)
Compatibility: Not stated.
`mcp-server-logs-sieve` is an MCP server that lets AI assistants query logs directly from your observability backend.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
evals/prepare_sources.py:45 with urllib.request.urlopen(request, timeout=timeout) as response:Mcp Server Pixeltable Developer (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.pixeltable/mcp-server-pixeltable-developer -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
api-testing-server.js:191 const response = await fetch(url, {Mcp Servers For Full Stack Development (MCP server)
Compatibility: Not stated.
A comprehensive collection of Model Context Protocol (MCP) servers designed to supercharge your development workflow with Claude Desktop.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/browser.ts:253 // `curl -b`. Devuelve cuántas escribió.Mcp Sii (MCP server)
Compatibility: Not stated.
Servidor MCP open source para el Sistema de Facturación Gratuito del SII (mipyme.sii.cl).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
src/mcp_tmux/targets.py:13 options are left to the user's ``~/.ssh/config``.Mcp Tmux (MCP server)
Compatibility: Not stated.
A comprehensive, universal [MCP](https://modelcontextprotocol.io) server for driving **tmux** , sessions, windows, panes, sending keystrokes, and reading pane output , on the local machine or on remote hosts over SSH.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/utils/anthropicUsage.ts:52 res = await fetch(USAGE_URL, {Mcp Token Saver (MCP server)
Compatibility: Not stated.
> Real-time Claude.ai/Codex subscription awareness for AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
mcp_audit_build_backend.py:221 return subprocess.run(MCPAudit (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.saagpatel/mcp-audit -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:1 agent-connector-sdk[mcp]>=0.2.1,<1.0.0Media Downloader (MCP server)
Compatibility: Not stated.
*Version: 4.4.3*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:92 @cyanheads/mcp-ts-coreMet Museum Mcp Server (MCP server)
Compatibility: Not stated.
Search the Metropolitan Museum of Art collection, browse it by department or update date, fetch full artwork records and open-access images via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
packages/meteoswiss-forecast-evals/src/mcp-vs-skills-bash-tool.test.ts:63 expectRejected("curl -s 'https://datMeteoswiss Llm Tools (MCP server)
Compatibility: Not stated.
Swiss weather data for AI assistants , forecasts, current conditions, stations, and pollen from MeteoSwiss Open Data.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:33 prepareMindbox Mcp (MCP server)
Compatibility: Not stated.
Если вы искали, как подключить Mindbox к нейросети, поднять профиль клиента или проверить сегмент без выгрузки в Excel , это оно.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
src/cherry.py:814 fetch('/set_debug')Nikita (MCP server)
Compatibility: Not stated.
**English summary.** Nikita is a service for 1C:Enterprise administrators that parses 1C event logs (the registration log, `.lgf`/`.lgp` text and `.lgd` SQLite formats) and exports them to ClickHouse for SQL analytics, with optional Solr full-text search and Redis buffering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
lib/oauth2/mcp.rb:86 headers = request.fetch(:headers, request.fetch("headers", nil)) if request.respond_to?(:Oauth2 Mcp (MCP server)
Compatibility: Not stated.
<a href="https://discord.gg/3qme4XHNKN"><img alt="Galtzo FLOSS Logo by Aboling0, CC BY-SA 4.0" src="https://logos.galtzo.com/assets/images/galtzo-floss/avatar-128px.svg" align="right"/></a> <a href="https://ruby-toolbox.com"><img alt="ruby-lang Logo, Yukihiro Matsumoto, Ruby Visu
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/mcp_server/tools/search_engine.py:254 response = requests.get(search_url, headers=headers, timeout=15)Oh My Mcp (MCP server)
Compatibility: Not stated.
English | [中文](README.zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/bench_lite_nav.py:66 proc = subprocess.run([exe, *args, str(Path(UT_ROOT) / "src")],Onec Vecgraph (MCP server)
Compatibility: Not stated.
MCP-сервер для **векторизации конфигураций 1С:Предприятие** (XML-выгрузка Конфигуратора **и** проекты **1C:EDT**, база + расширения) и построения **графа зависимостей** (включая граф вызовов BSL) в **Neo4j** , граф, векторы и полнотекст в одном хранилище.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
evals/build_fixtures.py:31 subprocess.run(Open Ocr Cli Mcp (MCP server)
Compatibility: Not stated.
Agent-first OCR for images, PDFs, and public URLs.
This grade is a hygiene screen, not proof of safety.
