MCP, MCP server
Awesome Agent Native Services
A curated list of agent-native services and infrastructure for AI agents: email, browsers, memory, sandboxes, payments, and MCP tools.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit f62daa51f20f.
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Why this grade
- INSTALL_REMOTE_SCRIPT High
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
skill.md, line 131
ser runtime agents can carry | Docker + curl: `curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh \| sh` | - NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
docs/assets/js/catalog-search.js, line 292
loadPromise = fetch(indexUrl, { credentials: "
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command call was found in the code. This check does not read permissions an entry declares. A permission line to run shell commands and fetch web content was found in this repository, and it may apply to this entry.
Install and update
Serious
install fetches a script from the network.
INSTALL_REMOTE_SCRIPT
skill.md, line 131
ser runtime agents can carry | Docker + curl: `curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh \| sh` |
skill.md, line 251
clicks, types and sees your screen. | `curl -fsSL https://auten.ai/install \| bash` → `npx -y @autenai/mcp` — [setup for a
skill.md, line 352
| [SmolVM](https://docs.celesto.ai/smolvm) | SmolVM: secure microVM sandboxes for AI agents | `curl -sSL https://celesto.ai/install.sh | bash` then `from smolvm import SmolVM` |
Show more
skill.md, line 479
g, augmenting, and publishing skills | `curl -fsSL https://sklz.city/install.sh | sh && sklz install` — [sklz.city](https://
docs/skill.md, line 118
ser runtime agents can carry | Docker + curl: `curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh \| sh` |
docs/skill.md, line 238
clicks, types and sees your screen. | `curl -fsSL https://auten.ai/install \| bash` → `npx -y @autenai/mcp` — [setup for a
docs/skill.md, line 339
| [SmolVM](https://docs.celesto.ai/smolvm) | SmolVM: secure microVM sandboxes for AI agents | `curl -sSL https://celesto.ai/install.sh | bash` then `from smolvm import SmolVM` |
docs/skill.md, line 466
g, augmenting, and publishing skills | `curl -fsSL https://sklz.city/install.sh | sh && sklz install` — [sklz.city](https://
catalog.json, line 758
"instruction": "curl -fsSL \"https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail_rust/main/install.sh?$(date +%s)\" | bash\nam",
catalog.json, line 1461
"instruction": "curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh | sh",
catalog.json, line 2647
"instruction": "curl -fsSL https://preloop.ai/install/cli | sh\npreloop signup\n# or: preloop login --url http://localhost:3000\npreloop agents discover",
catalog.json, line 3645
"instruction": "curl -fsSL https://auten.ai/install | bash",
catalog.json, line 4912
"instruction": "brew install beads\n# or: curl -fsSL https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh | bash\n# or: npm install -g @beads/bd\n\ncd your-p
catalog.json, line 6345
"instruction": "curl -fsSL https://raw.githubusercontent.com/BitMiracle-AI/Dormice/main/deploy/install.sh | bash",
catalog.json, line 6602
"instruction": "curl -sSL https://celesto.ai/install.sh | bash",
catalog.json, line 7810
"instruction": "curl https://raw.githubusercontent.com/agentgateway/agentgateway/refs/heads/main/common/scripts/get-agentgateway | bash\ncurl -sL https://raw.githubusercontent.com/
README.md, line 131
t-backed archive · TUI/robot CLI | ✅ | `curl -fsSL \"https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail_rust/main/install.sh?$(date +%s)\" \| bash` then `am` |
README.md, line 169
e · bounded MCP verifier | ✅ | Docker + curl: `curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh \| sh` |
README.md, line 227
gateway budgets · session audit | ✅ | `curl -fsSL https://preloop.ai/install/cli \| sh` then `preloop signup` and `preloop age
README.md, line 301
dd auten -- npx -y @autenai/mcp` after `curl -fsSL https://auten.ai/install \| bash` — [setup for agents](https://github.co
README.md, line 413
ive · HTTP RPC · E2B SDK compat | ⚠️ | `curl -fsSL https://raw.githubusercontent.com/BitMiracle-AI/Dormice/main/deploy/install.sh \| bash` then `npx skills add BitMiracle-AI/Dor
README.md, line 416
n · browser sandbox · snapshots | ⚠️ | `curl -sSL https://celesto.ai/install.sh \| bash` then `from smolvm import SmolVM` |
README.md, line 562
rimitives, publish/discover over MCP | `curl -fsSL https://sklz.city/install.sh | sh && sklz install` |
services/agent-runtime-and-infrastructure/auten.md, line 41
curl -fsSL https://auten.ai/install | bash
services/agent-runtime-and-infrastructure/cohesivity.md, line 49
curl -fsSL https://cohesivity.ai/quickstart.sh | bash
services/agent-runtime-and-infrastructure/cx.md, line 37
# or: curl -sL https://raw.githubusercontent.com/ind-igo/cx/master/install.sh | sh
services/agent-runtime-and-infrastructure/db9.md, line 41
- CLI install: `curl -fsSL https://db9.ai/install | sh`
services/agent-runtime-and-infrastructure/db9.md, line 50
curl -fsSL https://db9.ai/install | sh
services/browser-and-web-execution/jet-browser.md, line 36
curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh | sh
services/code-execution/axern.md, line 47
curl -fsSL https://raw.githubusercontent.com/cofy-x/axern/main/install.sh | sh
services/code-execution/dormice.md, line 41
curl -fsSL https://raw.githubusercontent.com/BitMiracle-AI/Dormice/main/deploy/install.sh | bash
services/code-execution/dormice.md, line 172
| Installer | `curl -fsSL https://raw.githubusercontent.com/BitMiracle-AI/Dormice/main/deploy/install.sh \| bash` |
services/code-execution/smolvm.md, line 40
curl -sSL https://celesto.ai/install.sh | bash
services/code-execution/smolvm.md, line 159
| Installer | `curl -sSL https://celesto.ai/install.sh \| bash` |
services/communication/mcp-agent-mail-rust.md, line 34
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail_rust/main/install.sh?$(date +%s)" | bash
services/llm-gateway-and-routing/agentgateway.md, line 35
curl https://raw.githubusercontent.com/agentgateway/agentgateway/refs/heads/main/common/scripts/get-agentgateway | bash
services/memory-and-state/beads.md, line 41
# or: curl -fsSL https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh | bash
services/memory-and-state/claude-mem.md, line 59
curl -fsSL https://install.cmem.ai/openclaw.sh | bash
services/memory-and-state/claude-mem.md, line 163
| OpenClaw | `curl -fsSL https://install.cmem.ai/openclaw.sh \| bash` |
services/oversight-and-approval/preloop.md, line 36
curl -fsSL https://preloop.ai/install/cli | sh
docs/catalog.json, line 758
"instruction": "curl -fsSL \"https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail_rust/main/install.sh?$(date +%s)\" | bash\nam",
docs/catalog.json, line 1461
"instruction": "curl -fsSL https://raw.githubusercontent.com/masakaai/jet-browser/main/scripts/try-jet.sh | sh",
docs/catalog.json, line 2647
"instruction": "curl -fsSL https://preloop.ai/install/cli | sh\npreloop signup\n# or: preloop login --url http://localhost:3000\npreloop agents discover",
docs/catalog.json, line 3645
"instruction": "curl -fsSL https://auten.ai/install | bash",
docs/catalog.json, line 4912
"instruction": "brew install beads\n# or: curl -fsSL https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh | bash\n# or: npm install -g @beads/bd\n\ncd your-p
docs/catalog.json, line 6345
"instruction": "curl -fsSL https://raw.githubusercontent.com/BitMiracle-AI/Dormice/main/deploy/install.sh | bash",
docs/catalog.json, line 6602
"instruction": "curl -sSL https://celesto.ai/install.sh | bash",
docs/catalog.json, line 7810
"instruction": "curl https://raw.githubusercontent.com/agentgateway/agentgateway/refs/heads/main/common/scripts/get-agentgateway | bash\ncurl -sL https://raw.githubusercontent.com/
Network
Serious
accepts a host from input, with no fixed list in this file. can reach a host that is not written as a fixed address. can reach mpp.dev. The description does not name that host.
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
docs/assets/js/catalog-search.js, line 292
loadPromise = fetch(indexUrl, { credentials: "
scripts/build-machine-catalog.py, line 334
instruction and "curl " in instruction.lower()
scripts/check-agent-endpoints.sh, line 25
fetch() {
Show more
scripts/check-agent-endpoints.sh, line 33
curl --silent --show-error --location --fail-with-body \
README.md, line 255
| [Lumen Tab](services/commerce-and-payments/lumen-tab.md) [](https://github.com/Dansgit2b/lumen-tab) | Pr
docs/skill.md, line 195
| [Lumen Tab](https://github.com/Dansgit2b/lumen-tab) | Prepaid USDC tabs for pay-per-call AI agent APIs on Arc (early-stage, unaudited) | `npm install github:Dansgit2b/lumen-tab`
services/browser-and-web-execution/bb-browser.md, line 88
bb-browser (BadBoy Browser) gives AI agents access to the entire authenticated internet by **routing commands through the user's real Chrome browser** — not a headless bot, not a s
services/browser-and-web-execution/bb-browser.md, line 133
Extension runs fetch()/eval() inside the user's real browser tab
services/browser-and-web-execution/lightpanda.md, line 63
**One-shot fetch (markdown or HTML):**
services/commerce-and-payments/lumen-tab.md, line 45
const res = await payer.fetch(PAID_API_URL); // any Lumen Tab–paywalled endpoint: 402 → voucher → retry
skill.md, line 208
| [Lumen Tab](https://github.com/Dansgit2b/lumen-tab) | Prepaid USDC tabs for pay-per-call AI agent APIs on Arc (early-stage, unaudited) | `npm install github:Dansgit2b/lumen-tab`
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
catalog.json, line 2130
"instruction": "git clone https://github.com/agentic-community/mcp-gateway-registry.git\ncd mcp-gateway-registry\ncp .env.example .env\n# Set required secrets (KEYCLOAK_ADMIN_PASSW
catalog.json, line 5403
"instruction": "git clone https://github.com/MemTensor/memmy-agent.git && cd memmy-agent\ncp .env.example .env\nbash scripts/dev-start.sh\n\nmemmy-memory init\nmemmy-memory health\
catalog.json, line 7393
"instruction": "docker pull ghcr.io/joinly-ai/joinly:latest\n# Quickstart client-in-container (no external MCP):\ndocker run --env-file .env ghcr.io/joinly-ai/joinly:latest --clien
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
catalog.json, line 1
{
docs/catalog.json, line 1
{
Licence
Note
no licence file found.
LICENCE_MISSING
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit f62daa51f20f. install fetches a script from the network. accepts a host from input, with no fixed list in this file. can reach a host that is not written as a fixed address. can reach mpp.dev. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read. no licence file found.
Date and source
Date checked:
github.com
Commit graded: f62daa51f20f7bac2af1008ff7df42386fb4ce27
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.