Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 501 to 550 of 1,860 MCP, Grade C entries. Page 11 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:49 prepareMcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides AI assistants with secure access to Bitwarden password manager functionality through two complementary interfaces:
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST
package.json:13 prepareMcp Server Antv (MCP server)
Compatibility: Not stated.
> A **Model Context Protocol (MCP)** server designed for AI development and QA that provides **AntV** documentation context and code examples using the latest APIs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
scripts/build-event.mjs:305 slices.map((_, i) => fs.rm(builtBinaries[i], { force: true })),Mcp Server Apple Events (MCP server)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:19 postinstallMcp Server Atlassian Bitbucket (MCP server)
Compatibility: Not stated.
Transform how you work with Bitbucket by connecting Claude, Cursor AI, and other AI assistants directly to your repositories, pull requests, and code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:18 postinstallMcp Server Atlassian Confluence (MCP server)
Compatibility: Not stated.
Transform how you access and interact with your team's knowledge by connecting Claude, Cursor AI, and other AI assistants directly to your Confluence spaces, pages, and documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:18 postinstallMcp Server Atlassian Jira (MCP server)
Compatibility: Not stated.
Transform how you manage and track your work by connecting Claude, Cursor AI, and other AI assistants directly to your Jira projects, issues, and workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/server.spec.e2e.ts:124 fs.unlinkSync(tempEnvFile);Mcp Server Azure Devops (MCP server)
Compatibility: Not stated.
An MCP server for Azure DevOps
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
test_http_transport.sh:29 http() { # http <curl args...>; sets HTTP_STATUS and HTTP_BODYMcp Server Bash Sdk (MCP server)
Compatibility: Not stated.
MCP server SDK/example implemented entirely in bash , build a Model Context Protocol server with no runtime dependency beyond a POSIX shell.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_UNCONFIRMED
package.json:16 prepareMcp Server Chart (MCP server)
Compatibility: Not stated.
🤖 A visualization mcp & skills contains 25+ visual charts using @antvis.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:15 prepareMcp Server Chatsum (MCP server)
Compatibility: Not stated.
Query and Summarize your chat messages.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/lib/file-output/safePaths.test.ts:184 fs.rmSync(sandbox, { recursive: true, force: true });Mcp Server Circleci (MCP server)
Compatibility: Not stated.
> [!IMPORTANT] > **This package is deprecated.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
scripts/run_matrix_local.sh:136 curl -s -X PUT \Mcp Server Couchbase (MCP server)
Compatibility: Not stated.
Couchbase MCP Server is a self-hosted [Model Context Protocol (MCP)](https://modelcontextprotocol.io/docs/2026-07-28/getting-started/intro) server that connects AI agents and LLM-powered assistants , Claude, Cursor, Windsurf, VS Code Copilot, and other [MCP clients](https://mode
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
evals/run.py:68 out = subprocess.run(Mcp Server Polarion (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.devemberx/mcp-server-polarion -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:15 prepareMcp Server Prometheus (MCP server)
Compatibility: Not stated.
MCP server for interacting with Prometheus metrics and data.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK
shortcuts.test.ts:443 fs.rmSync(directory, { recursive: true, force: true });Mcp Server Siri Shortcuts (MCP server)
Compatibility: Not stated.
This MCP server provides access to Siri shortcuts functionality via the Model Context Protocol (MCP).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
test_all_tools.py:28 process = subprocess.Popen(Mcp Simple Timeserver (MCP server)
Compatibility: Not stated.
*One of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
.gitignore:11 credentials.jsonMcp Ssh (MCP server)
Compatibility: Not stated.
[English Version (README-EN.md)](README-EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:14 preinstallMcp Summarization Functions (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/mcp_test_runner/runner.py:70 completed = subprocess.run(MCP Test Runner (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.LovRanRan/mcp-test-runner -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:26 prepareMcp Video Analyzer (MCP server)
Compatibility: Not stated.
Give your agent video input.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +3 more
scripts/download-node.ts:21 fs.unlink(dest, () => reject(err))Mcp X (MCP server)
Compatibility: Not stated.
[English](README.md) | [中文](README_zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/youtube.ts:397 const response = await fetch(Mcp Youtube Transcript (MCP server)
Compatibility: Not stated.
A TypeScript Model Context Protocol server that retrieves YouTube transcripts for Claude Desktop, Cursor, Cline, Codex, and other MCP-compatible clients.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:37 preparemcpbar (MCP server)
Compatibility: Not stated.
Your all-in-one CLI manager for MCP servers and home to an open registry with 1500+ ready-to-use servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
packages/cli/src/utils/compatibility-runner.test.ts:67 const response = await fetch(harness.env.OAUTH_TOKEN_URmcpforge (MCP server)
Compatibility: Not stated.
Generate MCP servers from OpenAPI specs or docs pages, then verify generated request compatibility before you publish or install them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:22 preparemcpm (MCP server)
Compatibility: Not stated.
A command-line tool for managing MCP servers in Claude App.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
internal/mcp/oauth.go:357 cmd = exec.Command("xdg-open", url)mcpshim (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://mcpshim.dev/icon.svg" alt="MCPShim" width="80" height="80" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
apps/api/src/index.ts:51 // Same-origin requests + curl / server-to-server have no Origin header - allow.MCPSpend (MCP server)
Compatibility: Not stated.
> **Know what your AI agents really cost.** Real-time cost tracking for every MCP tool call across Cursor, Claude Desktop, Windsurf, and VS Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB
.vscode-upload.json:10 "private_key": "~/.ssh/id_rsa"mcpsvr (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./public/logo.png" width="68" alt="MCPSvr logo" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
mcptoolkit_for_codesys/watcher_manager.py:377 proc = subprocess.run(Mcptoolkit For Codesys (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
src/mcptube/ingestion/frames.py:89 result = subprocess.run(mcptube (MCP server)
Compatibility: Not stated.
**YouTube video knowledge engine , transcripts, vision, and persistent wiki.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
src/cli/init.ts:141 try { fs.unlinkSync(temporary) }Meigen Ai Design Mcp (MCP server)
Compatibility: Not stated.
Discover inspiration and create images and videos with the latest AI models.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
ui/cli/app.go:179 return exec.Command("rundll32", "url.dll,FileProtocolHandler", uri).Start()melrose (MCP server)
Compatibility: Not stated.
`melrōse` is a tool to create and play music by programming melodies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:16 prepareMem0 Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that integrates with [Mem0.ai](https://mem0.ai/) to provide persistent memory capabilities for LLMs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
src/client.ts:106 response = await fetch(`${instance}${path}`, {MemCell (MCP server)
Compatibility: Not stated.
Living memory for AI coding agents: recall before acting, report outcomes so confidence is earned.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
montycat_mcp/bootstrap.py:504 completed = subprocess.run( # noqa: S603 - our own verified binaryMemoCat Shared AI Memory (MCP server)
Compatibility: Not stated.
<img src="https://raw.githubusercontent.com/MontyGovernance/montycat-mcp/master/assets/icon.png" alt="Montycat logo" width="72" align="left" hspace="12">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:32 prepareMemory Bank Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server implementation for remote memory bank management, inspired by Cline Memory Bank.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/benchmark_ingest.py:130 result = subprocess.run(Memory Kernel (MCP server)
Compatibility: Not stated.
<img width="1024" height="1024" alt="image" src="https://github.com/user-attachments/assets/f13a8ef3-23bb-4801-a5a4-05eeaa4f0041" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
install.sh:52 if ! command -v curl &>/dev/null; thenMemoryPilot (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://github.com/Soflutionltd/MemoryPilot"> <img src="https://raw.githubusercontent.com/Soflutionltd/MemoryPilot/main/static/banner.png" alt="MemoryPilot , The fastest local memory layer for AI agents" width="100%"/> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
benchmarks/terminal_bench/memorywhale_agent.py:171 shutil.rmtree(staging, ignore_errors=True)MemWhale (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/memorywhale-logo-sm.png" alt="MemoryWhale logo" width="160" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:103 credentials.jsonMetabase Mcp (MCP server)
Compatibility: Not stated.
A high-performance **Model Context Protocol (MCP) server** for **Metabase**, enabling AI assistants like **Claude**, **Cursor**, and other MCP clients to interact seamlessly with your Metabase instance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/install.py:20 subprocess.run(command, cwd=cwd, check=True)MetaSearchMCP (MCP server)
Compatibility: Not stated.
Open-source metasearch backend for MCP, AI agents, and LLM workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +3 more
src/daemon.ts:258 fs.unlinkSync(getDaemonRecordPath(key));Metro Mcp (MCP server)
Compatibility: Not stated.
Plugin-based MCP server for React Native/Expo runtime debugging, inspection, and automation via Metro/CDP
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
metroidvania-studio/cli-tests/live-server.test.mjs:23 const response = await fetch(url + path, body ? { methodMetroidvania Studio (MCP server)
Compatibility: Not stated.
Metroidvania Studio is a free, open-source 2D level editor for metroidvania games.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
requirements.txt:2 mcp>=2.0.0,<3.0.0Mikrotik Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.wiresage/mikrotik-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:20 prepareMinecraft Mcp Server (MCP server)
Compatibility: Not stated.
A Minecraft MCP Server powered by Mineflayer API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
tools/redfish_corpus.py:43 completed = subprocess.run(MIRASTACK Redfish MCP Server (MCP server)
Compatibility: Not stated.
Governed MCP server for DMTF Redfish BMCs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_UNNAMED_HOST SECRETS_PATH_UNCONFIRMED +1 more
packages/core/api.mjs:189 return { input, cleanup: () => fs.rmSync(dir, { recursive: true, force: true }) };Mirofy (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/logo-dark.png"> <img src="assets/logo.png" alt="Mirofy , connect, model, insight" width="380"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:19 prepareMmx Mcp Server (MCP server)
Compatibility: Not stated.
一个统一的 MiniMax 全模态 MCP Server，基于 `mmx` CLI 封装，支持文本、搜索、图像理解、图像生成、语音合成、视频生成、音乐生成和配额查询。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
benchmarks/head-to-head/adapters.py:119 proc = subprocess.run( # noqa: S603mneme Record (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/mneme-banner.jpg" alt="mneme , vault-native memory for Claude Code" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
site/learning.js:33 const response = await fetch('./learning.json', { signal: controller.signal, credentials:mnemosyne (MCP server)
Compatibility: Not stated.
**The next agent starts wiser.**
This grade is a hygiene screen, not proof of safety.
