Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1 to 50 of 1,860 MCP, Grade C entries. Page 1 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/android.yml:62 curl -fsSL "https://get.maestro.mobile.dev" | bashFantasyPremierLeague (MCP server)
Compatibility: Not stated.
Fantasy Premier League Kotlin/Compose Multiplatform sample
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:13 prepare12306 Mcp (MCP server)
Compatibility: Not stated.
This is a 12306 ticket search server based on the Model Context Protocol (MCP).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:17 prepare530A Model calculator (MCP server)
Compatibility: Not stated.
Free, deterministic 530A (Trump Account) projections, verified rules, and searchable guides.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
src/abfall_mcp_server/geo.py:259 resp = requests.get(Abfallkalender Deutschland (MCP server)
Compatibility: Not stated.
*English · [Deutsch](README.de.md)*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
lib/action_mcp/prompt.rb:200 @response.add_content(content, role: args.fetch(:role, "user")) # Add to the respaction_mcp (MCP server)
Compatibility: Not stated.
**ActionMCP** is a Ruby gem focused on providing Model Context Protocol (MCP) capability to Ruby on Rails applications, specifically as a server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
packages/core/src/generation/llm-client.ts:133 const response = await fetch("https://api.anthropic.com/v1/messAdaptive Cards Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="media/hero.png" alt="adaptive-cards-mcp , 9 tools, 21 patterns, 924 tests, 0 competitors" width="800"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/fetch-openapi.mjs:21 const res = await fetch(SPEC_URL, {AdButler (MCP server)
Compatibility: Not stated.
Manage AdButler campaigns, zones, ad items, VAST, and reports from Claude, ChatGPT, and Cursor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/plugins/sync_skill.py:272 with urllib.request.urlopen(source, timeout=30) as response:adloop (MCP server)
Compatibility: Not stated.
<!-- mcp-name: com.getadloop/adloop -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/admin_procedures/cli.py:277 def fetch(dataset_id: str, data_dir: Path | None, allowed_hosts: tuple[str, ..Administrative Procedures Mcp (MCP server)
Compatibility: Not stated.
日本語 | [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/aena/client.ts:115 const res = await fetch(url);AENA Flights MCP (MCP server)
Compatibility: Not stated.
**Español: [README.es.md](README.es.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:11 postinstallAfter Effects Mcp (MCP server)
Compatibility: Not stated.
MCP Server for Adobe After Effects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/redmine-up.sh:40 until curl -sf -o /dev/null "${BASE_URL}/"; doAgama Redmine Mcp (MCP server)
Compatibility: Not stated.
[MCP server](https://modelcontextprotocol.io/) for Redmine.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
dashboard/app.js:35 const res = await fetch(API + path, {Agent Board (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">🎯 Agent Board</h1> <p align="center"> <strong>Multi-agent task orchestration for <a href="https://github.com/openclaw/openclaw">OpenClaw</a> and AI agent teams.</strong><br/> Kanban dashboard · REST API · MCP server · DAG dependencies · Auto-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
integrations/invoice_guard/test_crypto_contract.py:156 mock.patch("subprocess.run", side_effect=AssertionErrorAgent Decision & Evidence Tools (MCP + x402) (MCP server)
Compatibility: Not stated.
**40 machine-callable tools, including 10 free preparation, routing and verification tools.** Pay only for a successfully delivered result in USDC through x402.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
data/failure_corpus.jsonl:35 {"id": "162", "kind": "adr", "title": "ADR-162: T9OS Machine Awareness + IPC remoAgent Failure Archive (MCP server)
Compatibility: Not stated.
**186 post-mortems from running a multi-session AI agent system in production for 8 months.** Pay per call with [x402](https://x402.org).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
bench/promote-bench.ts:245 if (backup.cursorExisted) fs.unlinkSync(cursorFile);Agent Knowledge (MCP server)
Compatibility: Not stated.
Cross-session memory for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
internal/mcpproxy/process.go:71 cmd := exec.Command(command, args...)AgentAnycast (MCP server)
Compatibility: Not stated.
**The core daemon powering AgentAnycast's P2P agent network.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
requirements.txt:23 openaiAgentic Ai Engineering (MCP server)
Compatibility: Not stated.
**Agentic AI Engineering** is a production-grade engineering resource for building modern agentic AI systems with LangChain, LangGraph, RAG, MCP, local models, and deployable Python services.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:34 prepareAgentic Cal (MCP server)
Compatibility: Not stated.
**Agentic email + calendar hub on Cloudflare Workers.** One Worker owns your domain's email surface: a full self-hosted email client with an AI agent, plus a unified calendar that aggregates Proton / Outlook / iCloud into one busy/free model and writes time blocks back to all thr
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:213 credentials.jsonagentidentityprotocol (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">Agent Identity Protocol (AIP)</h1> <p align="center"><em>The Zero-Trust Identity Layer for MCP & Autonomous Agents</em></p> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
examples/tools/google_calendar.py:23 result = subprocess.run(agentor (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <img src="https://raw.githubusercontent.com/CelestoAI/agentor/main/assets/CelestoAI.png" alt="project logo" width="500px"/> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
Sources/AgentRunKit/LLM/Providers/Vertex/GoogleAuthService.swift:138 return "\(home)/.config/gcloud/applicatioAgentRunKit (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo-dark.png" alt="AgentRunKit" width="280"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/agy_headless_bridge/bridge.py:11 plain `subprocess.run(["agy", "-p", prompt])` returns an empty string - wAgy Headless Bridge (MCP server)
Compatibility: Not stated.
MCP server that runs Google's Antigravity CLI (agy) headlessly inside a pseudo-terminal and returns its cleaned output to Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
tools/login.go:23 cmd = exec.Command("rundll32", "url.dll,FileProtocolHandler", url)Ah Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) server for the Albert Heijn (🇳🇱) supermarket API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/check_installed.py:41 result = subprocess.run([str(executable(command)), '--help'], capture_output=TruAI Pensieve MCP (MCP server)
Compatibility: Not stated.
中文版：[README](README.zh-CN.md) · [客户端设置](docs/AI_CLIENTS.zh-CN.md) · [用户指南](docs/USER_GUIDE.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
src/ai_surface/repo.py:145 shutil.rmtree(tmp, ignore_errors=True)Ai Surface (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
node/packages/mcp-server/src/parity_live.test.ts:161 fs.unlinkSync(tempJsonPath);ai.adeu/adeu (MCP server)
Compatibility: Portable across standard formats.
Automated DOCX Redlining Engine
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/core/api.ts:64 const res = await fetch(`${this.baseUrl}${path}`, {ai.justdrop/mcp (MCP server)
Compatibility: Not stated.
Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.github/workflows/zenodo-archive.yml:52 with urllib.request.urlopen(r) as resp:ai.mentu/navigator (MCP server)
Compatibility: Not stated.
Read-only repo navigation and progressive disclosure; BM25 locator with registered evidence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
cli/src/auth/storage.ts:129 fs.unlinkSync(tmp);ai.shipeasy/mcp (MCP server)
Compatibility: Not stated.
Feature flags, A/B experiments, kill switches, dynamic config & i18n , Shipeasy MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV
package.json:14 prepareai.smithery/arjunkmrm-perplexity-search (MCP server)
Compatibility: Not stated.
Enable AI assistants to perform web searches using Perplexity's Sonar Pro.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
src/igdb_mcp_server/server.py:140 client_secret = os.getenv("IGDB_CLIENT_SECRET") or (settings.IGDB_CLIENT_SECai.smithery/bielacki-igdb-mcp-server (MCP server)
Compatibility: Not stated.
Explore and discover video games from the Internet Game Database.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:30 prepareai.smithery/brave (MCP server)
Compatibility: Not stated.
Visit https://brave.com/search/api/ for a free API key.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
evals/run-evals.ts:238 await Promise.all(workflowFiles.map((f) => fs.unlink(f)));ai.smithery/browserbasehq-mcp-browserbase (MCP server)
Compatibility: Not stated.
Provides cloud browser automation capabilities using Stagehand and Browserbase, enabling LLMs to i…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:14 prepareai.smithery/callmybot-cookbook-mcp-server (MCP server)
Compatibility: Not stated.
Count occurrences of any character in your text instantly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:31 prepareai.smithery/ChiR24-unreal_mcp (MCP server)
Compatibility: Not stated.
Control Unreal Engine to browse assets, import content, and manage levels and sequences.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
docs/pt-br/desenvolvimento/configuracao-ambiente.md:35 curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/vai.smithery/cristianoaredes-mcp-dadosbr (MCP server)
Compatibility: Not stated.
# MCP DadosBR Servidor MCP focado em dados públicos do Brasil.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
index.ts:67 process.env.COTI_MCP_AES_KEY = config.cotiMcpAesKey;ai.smithery/cuongpo-coti-mcp (MCP server)
Compatibility: Not stated.
Connect to the COTI blockchain to manage accounts, transfer native tokens, and deploy and operate…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
src/config.ts:6 export const GMAIL_CREDENTIALS_PATH = path.join(MCP_CONFIG_DIR, 'credentials.json')ai.smithery/faithk7-gmail-mcp (MCP server)
Compatibility: Not stated.
Manage Gmail messages, threads, labels, drafts, and settings from your workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareai.smithery/flight505-mcp_dincoder (MCP server)
Compatibility: Not stated.
Driven Intent Negotiation , Contract-Oriented Deterministic Executable Runtime DinCoder brings the…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_UNCONFIRMED
package.json:16 postinstallai.smithery/hustcc-mcp-mermaid (MCP server)
Compatibility: Not stated.
Generate dynamic Mermaid diagrams and charts with AI assistance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
test-server.ts:65 fs.unlink(outputPath, () => {});ai.smithery/huuthangntk-claude-vision-mcp-server (MCP server)
Compatibility: Not stated.
Analyze images from multiple angles to extract detailed insights or quick summaries.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:26 prepareai.smithery/isnow890-data4library-mcp (MCP server)
Compatibility: Not stated.
책 싫어하는 제가 책에 대해 아는척하고 싶어서 만들었습니다..
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:16 prepareai.smithery/jjlabsio-korea-stock-mcp (MCP server)
Compatibility: Not stated.
Search company disclosures and financial statements from the Korean market.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:18 prepareai.smithery/keithah-hostex-mcp (MCP server)
Compatibility: Not stated.
Manage your Hostex vacation rentals, properties, reservations, availability, listings, and guest me…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:19 prepareai.smithery/LinkupPlatform-linkup-mcp-server (MCP server)
Compatibility: Not stated.
Search the web in real time to get trustworthy, source-backed answers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/cozi/client.ts:150 const response = (await this.http.request({ai.smithery/mjucius-cozi_mcp (MCP server)
Compatibility: Not stated.
Manage your family's calendars and lists in Cozi.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:36 prepareai.smithery/Nekzus-npm-sentinel-mcp (MCP server)
Compatibility: Not stated.
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
src/src/auth.ts:36 const tokenRes = await fetch("https://oauth2.googleapis.com/token", {ai.smithery/sebastianall1977-gmail-mcp (MCP server)
Compatibility: Not stated.
Manage Gmail end-to-end: search, read, send, draft, label, and organize threads.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
src/utils/cleanup.ts:148 await fs.unlink(lockFile);ai.smithery/sunub-obsidian-mcp-server (MCP server)
Compatibility: Not stated.
Search your Obsidian vault to quickly find notes by title or keyword, summarize related content, a…
This grade is a hygiene screen, not proof of safety.
