Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 451 to 500 of 1,860 MCP, Grade C entries. Page 10 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:16 postinstallMahonia (MCP server)
Compatibility: Not stated.
Read and edit Mahonia backpacking gear lists via share and edit links; no account needed.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp-client.ts:44 response = await fetch(this._url, {Mailcannon (MCP server)
Compatibility: Not stated.
AI-powered email outreach platform using MCP (Model Context Protocol).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
src/tools/emailLogs/getEmailLogMessage.ts:76 const rawResponse = await fetch(log.raw_message_url, {Mailtrap Mcp (MCP server)
Compatibility: Not stated.
The official MCP server for Mailtrap , the email delivery platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mainbook_mcp/credentials.py:91 return Path.home() / ".config" / "mainbook" / "credentials.json"MainBook Bank Statement Converter (MCP server)
Compatibility: Not stated.
Convert PDF bank statements to checked Excel, CSV or JSON with balance validation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
apps/fetcher/README.md:115 curl -fsSL https://bun.sh/install | bash && install -m755 ~/.bun/bin/bun /usr/localMarkLayer (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://marklayer.app"> <img src=".github/icon.svg" width="112" height="112" alt="MarkLayer logo"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/markmap/lifecycle.ts:71 await fs.unlink(file.filePath);Markmap Mcp Server (MCP server)
Compatibility: Not stated.
Markmap MCP Server is based on the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
scripts/generate-icons.mjs:74 fs.rmSync(iconsetDir, { recursive: true });markupr (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="src/renderer/assets/logo.svg" alt="markupR" width="80" height="80"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:44 prepareMarzban MCP (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:34 prepareMastercard Developers MCP (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://developer.mastercard.com/_/_/src/global/assets/svg/mcdev-logo-light.svg"> <img src="https://developer.mastercard.com/_/_/src/global/assets/svg/mcdev-logo-dark.svg" alt="mastercard developers logo"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
requirements.txt:2 fastmcp>=2.0.0Maximo Enterprise MCP (MCP server)
Compatibility: Not stated.
# Maximo Enterprise MCP
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:18 preparemcp (MCP server)
Compatibility: Not stated.
Browser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
code_graph_bridge.py:56 self._child: subprocess.Popen[str] | None = NoneMcp Agent Switchboard (MCP server)
Compatibility: Not stated.
**Use Claude Code, Codex, Gemini, Antigravity, and VS Code together , without copy-pasting context between them.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
src/arr-client.ts:423 const response = await fetch(url, {Mcp Arr (MCP server)
Compatibility: Not stated.
<!-- <p align="center"> <img src="docs/mcp-arr-logo.png" alt="MCP *arr Server" width="400"> </p> -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:16 prepareMcp Batchit (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
evaluations/prepare_comparison.py:33 files = subprocess.check_output(['git', 'ls-tree', '-r', '--name-only', bMcp Boundary (MCP server)
Compatibility: Not stated.
<p align="center"><img src="brand/exports/logo.png" width="152" alt="MCP Boundary mark"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/install_dependency_floors.py:68 return subprocess.run([str(args.pip), "install", "--quiet", *pins], chMcp Broker (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.doricstack/mcp-broker -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.cursor/rules/isolation_rules/visual-maps/van-mode-map.mdc:588 Invoke-Expression $tool.Command | Out-NullMcp Bsl Platform Context (MCP server)
Compatibility: Not stated.
**MCP (Model Context Protocol) сервер** , это инструмент для интеграции с AI-ассистентами (например, Claude Desktop, Cursor IDE), предоставляющий быстрый и стандартизированный доступ к справочной информации по встроенным функциям, типам данных, методам и свойствам платформы 1С:П
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:56 @clack/promptsMcp Client Gen (MCP server)
Compatibility: Not stated.
Generate a typed TypeScript client for a remote [MCP](https://modelcontextprotocol.io) server (Streamable HTTP or SSE): point it at a URL, get a module with one method per tool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:12 credentials.jsonMcp Codebase Index (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.MikeRecognex/mcp-codebase-index -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/mcp_crew_ai/cli.py:119 subprocess.run(cmd)Mcp Crew Ai (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="https://github.com/crewAIInc/crewAI/blob/main/docs/crewai_logo.png" alt="CrewAI Logo" /> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:67 prepareMcp Dataverse (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
internal/agent/oauth_mcp.go:321 cmd = exec.Command("xdg-open", urlStr) //nolint:gosec // G204: fixed opener, UMcp Debug (MCP server)
Compatibility: Not stated.
`mcp-debug` is a command-line tool for debugging MCP (Model Context Protocol) servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/main.ts:460 fs.unlinkSync(tmpCliPath);Mcp Defender (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="./src/assets/white_knight_icon.png"> <source media="(prefers-color-scheme: light)" srcset="./src/assets/black_knight_icon.png"> <img alt="Shows a black knight in light color mode and a white knight
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:29 prepareMcp Documentation Server (MCP server)
Compatibility: Not stated.
MCP Documentation Server - Bridge the AI Knowledge Gap.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
server.py:1865 ssh_key_filename: Path to SSH private key file (default: ~/.ssh/id_rsa)Mcp File Edit (MCP server)
Compatibility: Not stated.
A simple Model Context Protocol (MCP) server that provides comprehensive file system operations including the ability to patch files and perform basic code analysis aimed at reducing Claude Desktop's token usage when compared to other similar tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:11 prepareMcp Gateway (MCP server)
Compatibility: Not stated.
A gateway service that bridges the stdio-based Model Context Protocol (MCP) implementation in Claude Desktop with HTTP/SSE-based MCP servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:24 prepareMcp Gemini Server (MCP server)
Compatibility: Not stated.
- [Overview](#overview) - [File Uploads vs URL-Based Analysis](#file-uploads-vs-url-based-analysis) - [Features](#features) - [Prerequisites](#prerequisites) - [Installation & Setup](#installation--setup) - [Configuration](#configuration) - [Available Tools](#available-tools) - [
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:11 prepareMcp Gitlab Server (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/repo-logo.png" alt="GitLab MCP Server Logo" width="200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
.cursor/rules/fastmcp.mdc:1986 34 | subprocess.run(Mcp Google Ads (MCP server)
Compatibility: Not stated.
An MCP tool that connects Google Ads with Claude AI/Cursor and others, allowing you to analyze your advertising data through natural language conversations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
gsc_server.py:189 os.remove(TOKEN_FILE)Mcp Gsc (MCP server)
Compatibility: Not stated.
Google Search Console Insights with Claude AI for SEOs
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:48 prepareMcp Image (MCP server)
Compatibility: Not stated.
> Generate and edit images from Codex, Cursor, Claude Code, or any MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp_jenkins/jenkins/rest_client.py:53 # Without credentials no auth is set, so Jenkins applies anonymous pMcp Jenkins (MCP server)
Compatibility: Not stated.
The Model Context Protocol (MCP) is an open-source implementation that bridges Jenkins with AI language models following Anthropic's MCP specification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:49 @modelcontextprotocol/sdkMcp Jenkins (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:19 prepareMcp Jetbrains (MCP server)
Compatibility: Not stated.
A model context protocol server to work with JetBrains IDEs: IntelliJ, PyCharm, WebStorm, etc.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:60 prepareMcp Llm (MCP server)
Compatibility: Not stated.
An MCP server that provides access to LLMs using the LlamaIndexTS library.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:15 prepareMcp Llms Txt Explorer (MCP server)
Compatibility: Not stated.
<a href="https://glama.ai/mcp/servers/lhyj3pva0z"> <img width="380" height="200" src="https://glama.ai/mcp/servers/lhyj3pva0z/badge" alt="LLMS.txt Explorer MCP server" /> </a>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:66 prepareMcp Local Rag (MCP server)
Compatibility: Not stated.
Local-first RAG server for developers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
app/mcp_tool_use/run_mcp_tool_use.sh:5 ## curl to test Tool Use Chat APIMcp Marketplace (MCP server)
Compatibility: Not stated.
[WeChat](https://raw.githubusercontent.com/aiagenta2z/mcp-marketplace/refs/heads/main/docs/mcp_marketplace_wechat_group.png)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/test-helpers/database-helper.ts:82 if (fs.existsSync(dbPath)) fs.unlinkSync(dbPath);Mcp Memory Keeper (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides persistent context management for Claude AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:43 prepareMcp Memory Libsql (MCP server)
Compatibility: Not stated.
A high-performance, persistent memory system for the Model Context Protocol (MCP) powered by libSQL with optimized text search for LLM context efficiency.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_UNCONFIRMED
package.json:19 prepareMcp Mongo Server (MCP server)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:16 prepareMcp Nest (MCP server)
Compatibility: Not stated.
A NestJS module to effortlessly create Model Context Protocol (MCP) servers for exposing AI tools, resources, and prompts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:32 prepareMcp Notion Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol server for connecting Notion to MCP-compatible clients
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:29 prepareMcp Openapi Schema Explorer (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://github.com/kadykov/mcp-openapi-schema-explorer/raw/main/assets/logo.min.svg" alt="MCP OpenAPI Schema Explorer Logo" width="200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:19 prepareMcp Rag Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that enables Retrieval Augmented Generation (RAG).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
bridge/setup.go:401 cmd := exec.Command("clip.exe")Mcp Rsv Data (MCP server)
Compatibility: Not stated.
Опубликовано на Infostart: <https://infostart.ru/1c/tools/2720241/>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/checks/mcp06-resource-access.ts:24 s (e.g. ../../etc/passwd, ~/.ssh/id_rsa, .env).`,Mcp Scan (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:42 prepareMcp Screenshot Server (MCP server)
Compatibility: Not stated.
An [MCP (Model Context Protocol)](https://modelcontextprotocol.io/) server that provides AI assistants with screenshot capabilities , both web page capture via [Puppeteer](https://pptr.dev/) and cross-platform system screenshots using native OS tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
run-with-google-adk/static/app.js:112 const res = await fetch(`${API_BASE_URL}/app_name`);Mcp Security (MCP server)
Compatibility: Not stated.
Public repository google/mcp-security.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST
package.json:27 prepareMcp Server (MCP server)
Compatibility: Not stated.
MCP server for AI agents that need a phone number: order a private number in 200+ countries, read the SMS verification code, hand it back.
This grade is a hygiene screen, not proof of safety.
