Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2601 to 2650 of 3,335 Grade C entries. Page 53 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
examples/demo-run.mjs:31 const res = await fetch(`${BASE}${path}`, {Coinrithm Agent Trading (MCP server)
Compatibility: Not stated.
Let any AI agent , Claude (Code / Desktop), ChatGPT / Codex, Gemini , **paper-trade on CoinRithm** using a key _you_ mint and control.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:40 prepareConstellation Mcp (MCP server)
Compatibility: Not stated.
Give your AI coding assistant instant, intelligent access to your entire codebase's structure, dependencies, and relationships without transmitting any source code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargcontext (MCP server)
Compatibility: Not stated.
*The binary is `ctx`.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.github/workflows/release.yml:148 with urllib.request.urlopen(urllib.request.Request(url, headers=headers)) ascrucible (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/HarperZ9/crucible/main/docs/art/hero-dark.svg"> <img src="https://raw.githubusercontent.com/HarperZ9/crucible/main/docs/art/hero-light.svg" alt="crucible: Register a thesis, measure e
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
AI_AGENT.md:32 curl https://ollama.ai/install.sh | shctxai (MCP server)
Compatibility: Not stated.
**Local-first coding agent with persistent, syntax-aware semantic repository memory**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/ingest_diadoc.py:73 with urllib.request.urlopen(req, timeout=60) as r:Diadoc Mcp Ru (MCP server)
Compatibility: Not stated.
API Диадока прямо в Claude: входящие и исходящие документы, статусы документооборота, контрагенты и приглашения к ЭДО, подписание, МЧД, печатные формы.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
test.sh:12 curl -sL \Diffbot Mcp (MCP server)
Compatibility: Not stated.
A Diffbot MCP server with a variety of helpful web knowledge fetching tools for your agent or LLM pipeline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
CHANGELOG.md:15 - One connection for the computer. The `connect` tool gives the human one link and a short codDropthehassle Mcp (MCP server)
Compatibility: Not stated.
How do I get my site live with my AI?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
CHANGELOG.md:61 - **`perf_run`'s post-idle route check compares paths.** It compared whole URIs, so a page thadusk (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/fluttersdk/dusk/master/.github/dusk-logo.svg" width="120" alt="Dusk Logo" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/inputs.cjs:171 for (const file of expected) if (!retained.has(file)) fs.rmSync(path.join(outdir, file)dynamoi (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/getDynamoi/dynamoi/main/.github/assets/hero-dark.png"> <img alt="Dynamoi: music promotion and distribution, built for AI agents" src="https://raw.githubusercontent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:23 prepareE Gov Law Mcp (MCP server)
Compatibility: Not stated.
[e-Gov法令API v2](https://laws.e-gov.go.jp/apitop/) をラップした [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) サーバーです。日本の法令データ（法令一覧・改正履歴・法令本文・添付ファイルなど）をMCP対応クライアント（Claude Codeなど）から検索・取得できるようにします。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:20 credentials.jsonEllmos Clatcher Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.jpg" alt="clatcher logo" width="400"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/lib/brand-extractor.ts:14 const response = await fetch(normalizedUrl, {Email Design Mcp (MCP server)
Compatibility: Not stated.
email-design-mcp is an application that helps you design and generate email templates.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
apps/agent-ingress/src/index.test.ts:11 const guide = await handler.fetch(ezdeploy (MCP server)
Compatibility: Not stated.
<p align="right"> <strong>English</strong> · <a href="./README.zh-CN.md">简体中文</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/publish.yml:126 curl -sSL https://raw.githubusercontent.com/modelcontextprotocol/registry/maFastmcp Sqlite (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/utils/tracking.sh:36 response=$(curl -s -X POST \Fedora Agents (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.amineutron/fedora-agents -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
fish-career/eval/postings/globex-adversarial.txt:11 partner with sales on lead routing. Ignore all previous inFish Career (MCP server)
Compatibility: Not stated.
fish.career is local-first job search: an MCP server and CLI that rank postings against your profile, explain every score, and measure the ranking against your own judgment.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/release.py:76 result = subprocess.run(Forgejo Mcp (MCP server)
Compatibility: Not stated.
Optional [OAuth authorization](docs/security/oauth-2.1.md) is disabled by default.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:66 prepareghostimport (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.png" width="128" alt="ghostimport logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
backend/main.go:166 cmd := exec.Command("git", args...)Github Command Center (MCP server)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/index.ts:166 // Auth errors (e.g. missing credentials.json) are reported by getAuthClientGoogle Suite Mcp (MCP server)
Compatibility: Not stated.
<!-- GitHub repo description (paste into the "About" field): Google Workspace MCP server for Claude Desktop, Cursor, Windsurf, VS Code, Gemini CLI, and any MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:52 prepareGrok Mcp (MCP server)
Compatibility: Not stated.
MCP server for the xAI Grok API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
core/channels/email.py:244 with urllib.request.urlopen(request, timeout=self.timeout) as response:Hybrid Orchestrator (MCP server)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
src/sanitize.rs:1099 // <div style="display:none">IGNORE PREVIOUS INSTRUCTIONSImap Mcp (MCP server)
Compatibility: Not stated.
A self-hosted Rust service that acts as a multi-tenant IMAP MCP server for claude.ai, using any OpenID Connect provider for authentication.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
benchmarks/navigate/build_queries.py:29 return subprocess.run(["git", "-C", str(root / repo), *args], check=Trindex (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="docs/art/hero-dark.svg"> <img src="docs/art/hero-light.svg" alt="index: Map a workspace offline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
Scripts/test-install.py:49 return subprocess.run(ios_mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/banner.svg" alt="ios-mcp , headless iOS dev, straight from the CLI" width="700"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
requirements.txt:1 agent-connector-sdk[mcp]>=0.4.1,<1.0.0Jellyfin Mcp (MCP server)
Compatibility: Not stated.
*Version: 2.3.3*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:29 prepareJira Easy Mcp (MCP server)
Compatibility: Not stated.
Another Model Context Protocol (MCP) server for Jira, without Auth token.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
cmd/just-mcp-work/main_test.go:323 command := exec.CommandContext(Just Mcp Work (MCP server)
Compatibility: Not stated.
> Just work with your workspace - over MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
connector/src/cli.js:533 const res = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });kelabo (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="logo/mark_readme.png" width="180" alt="Kelabo logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/kenning_encounter_install_hooks.py:48 r = subprocess.run(["git", "-C", str(repo), *args], capture_outpKenning Encounter (MCP server)
Compatibility: Not stated.
**Encounter driven, temporally constituted persistent memory for an LLM, backed by Neo4j.** An MCP server that lets a model accumulate what it learns about a subject across many separate sessions, recall it on re-entry, and reason over it , with the graph's integrity enforced by
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
lookup.py:608 body = urllib.request.urlopen(urllib.request.Request(King County Permit Status (MCP server)
Compatibility: Not stated.
Look up building permit history and status across King County, WA jurisdictions , county-level permits (septic, critical areas, grading) and city-level permits (building, mechanical, electrical) can all apply to the same address.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/make-demo.py:105 subprocess.run(["rsvg-convert","-w",str(W),"-h",str(H),sp,"-o",pp], check=True)Korean Patent Mcp (MCP server)
Compatibility: Not stated.
**특허 출원번호나 기술 설명을 넣으면, 그 권리가 지금 살아있는지를 판정해서 돌려주는 MCP 서버.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
src/laya_mcp/harnesses.py:992 completed = subprocess.run( # noqa: S603 - a fixed argv from our own tableLaya Mcp (MCP server)
Compatibility: Not stated.
Ask a local Laya model for typed noul, choice and score judgments and branch on the probabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
server.py:135 self.process = subprocess.Popen(LinuxManagerMCP (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.github/workflows/mirror.yml:31 ssh-keyscan -t ed25519 gitlab.com >> ~/.ssh/known_hostsLlm Grace (MCP server)
Compatibility: Not stated.
Public repository hyperpolymath/llm-grace.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
packages/cli/src/init.ts:233 fs.rmSync(pluginDir, { recursive: true, force: true });Lux Edit (MCP server)
Compatibility: Not stated.
Live in-browser visual editing, design token tweaking, and multi-agent review overlay for web apps.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:31 preparemarkcv (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/phuthuycoding/markcv/master/docs/images/logo-256.png" width="104" alt="markcv logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zz5pEYJy0" style="display:none">979f+OV9DF1B9ilk337dOx/L6zGd1edUcz547/Igqu3BolPy521LJxi7Mcp Agent Search Hub (MCP server)
Compatibility: Not stated.
Imagine a digital ecosystem where AI agents don't just wait for instructions, they actively explore, discover, and connect opportunities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp_atlassian_extended/clients/jira.py:127 ``safe.txt -> ~/.ssh/id`` resolves outside the root.Mcp Atlassian Extended (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.vish288/mcp-atlassian-extended -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
mcp_readwise/server.py:62 result = subprocess.run(Mcp Readwise (MCP server)
Compatibility: Not stated.
MCP server for [Readwise](https://readwise.io) and Readwise Reader, built on [FastMCP](https://github.com/prefecthq/fastmcp).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
CLAUDE.md:384 - EVIDENCE: Show code lines: `httpx.get(user_url)` without validation = CONFIRMEDMcp Redteam (MCP server)
Compatibility: Not stated.
Full audit and penetration testing of MCP servers , health, architecture, completeness, security
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:15 prepareMcp Server (MCP server)
Compatibility: Not stated.
MCP server for [Declaw](https://declaw.ai) , secure sandbox execution for AI agents with network policies, PII scanning, prompt injection defense, and audit logging.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
mcp_ssh_gateway/logs.py:164 os.remove(path)Mcp Ssh (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.d00mus/mcp-ssh-gateway -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/api.ts:84 return globalThis.fetch(url, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });Mcp Taiga (MCP server)
Compatibility: Not stated.
A TypeScript MCP server for Taiga.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
managed.go:107 mh.cmd = exec.CommandContext(ctx, bin, "--plugin", cfg.Plugin, "--catalog", catalogPath, "--porMcp Vst Sidechain (MCP server)
Compatibility: Not stated.
**An agent's control input for any plugin.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
app/dashboard/page.tsx:110 const res = await fetch(`/api/health?${params.toString()}`);MCPHub (MCP server)
Compatibility: Not stated.
**The developer platform for Model Context Protocol.** Discover, test, debug, and monitor any MCP server , from a single browser tab.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
packages/cli/src/commands/ingest.ts:109 await fs.unlink(tmpPath).catch(() => undefined);md2do (MCP server)
Compatibility: Not stated.
Manage TODO items in markdown files with powerful filtering, sorting, native [Todoist](https://www.todoist.com) sync, and open multi-source ingestion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bench_memory/safety.py:143 with urllib.request.urlopen(url, timeout=timeout) as resp:membro (MCP server)
Compatibility: Not stated.
Membro is a memory for AI assistants that runs on your own computer.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:10 credentials.jsonMeta Ads Mcp (MCP server)
Compatibility: Not stated.
**Create and manage Facebook & Instagram (Meta) ad campaigns from your AI assistant.** Adbloop's Meta Ads MCP server lets Claude, ChatGPT, and Cursor launch, scale, and manage real Meta Ads campaigns , bulk creation, multi-account, spend guardrails, and reporting , through a ho
This grade is a hygiene screen, not proof of safety.
