Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 551 to 600 of 1,860 MCP, Grade C entries. Page 12 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL
src/monarch_mcp_server/secure_session.py:722 os.remove(path)Monarch Mcp Server (MCP server)
Compatibility: Not stated.
MCP Server for use with Monarch Money
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/contract-drift.test.ts:22 const response = await fetch(`${MOXIE_SITE_URL}/.well-known/mcp/server-card.jsonMoxie Docs (MCP server)
Compatibility: Not stated.
Connect Claude to Moxie Docs , living documentation and repository context (conventions, doc gaps, API context, source-cited pages) over MCP, plus the edit-then-document skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
substrate/src/sealing.rs:83 //! Per PIP discipline ("changed code without build/test/curl = malpractice"):Myco: Agent-First Cognitive Substrate (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED SECRETS_PATH_DOTENV
src/mysql_mcp_server/server.py:93 ssh_proc = subprocess.Popen(ssh_cmd, stdout=subprocess.PIPE, stderr=subprocemysql_mcp_server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
TROUBLESHOOTING.md:167 curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bashN8N Workflow Builder (MCP server)
Compatibility: Not stated.
AI assistant integration for n8n workflow automation through Model Context Protocol (MCP).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED
mcp_pdf_utils.py:49 result = subprocess.run(NanoPDF (MCP server)
Compatibility: Not stated.
Public repository r09722akabennett/nano-pdf-mcp.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:14 prepareNaver Search Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://img1.kakaocdn.net/thumb/R0x200a.i/?fname=https%3A%2F%2Ft1.kakaocdn.net%2Fkomi%2Fupload-files%2Fmcp%2Fimages%2FnQzoe8vIxql0oK7Rwi239dxO2iYrxozLLQCIPRpVjmOjwGyPw0ZNUnNJfGkO1kAZmKf16eLZPAYi8NIS8XaBZJ.png" alt="Naver Search MCP Server Logo" width=
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
src/mcp_neocoder/qdrant_manager.py:59 subprocess.run( # nosec B603 B607 # Docker command with hardcoded argsNeocoder Neo4J Ai Workflow (MCP server)
Compatibility: Not stated.
An MCP server implementation that enables AI assistants like Claude to use a Neo4j knowledge graph as their primary, dynamic "instruction manual" and project memory for standardized coding workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:74 postinstallNew Relic MCP Server (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Meet-Bhalodiya/newrelic-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/bootstrap-agent-docs.js:106 if (fs.existsSync(temporary)) fs.unlinkSync(temporary);nexus (MCP server)
Compatibility: Not stated.
Plugin-first Claude Code workflows with planning, CI/CD debugging, reusable agents, TODOs, and MCP safety policies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/ha-git-backup/scripts/backup_offsite.sh:32 REL_JSON="$(curl -sf "${AUTH[@]}" -X POST "$API/releases" \Nickol Knx (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.NickoScope/nickol-knx-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:20 prepareNitrosend (MCP server)
Compatibility: Not stated.
Optional stdio bridge for [Nitrosend](https://nitrosend.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
backend/frontend_builder.py:197 subprocess.run,nocturne_memory (MCP server)
Compatibility: Not stated.
A lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:39 prepareNostr Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that enables AI models to interact with Nostr, allowing them to post notes and interact with the freedom of speech protocol.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/accounts/account-manager.ts:305 await fs.rm(accountDir, { recursive: true, force: true });Notebooklm Mcp (MCP server)
Compatibility: Not stated.
Automate Google NotebookLM at scale.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/bulk-delete.mjs:30 const res = await fetch(BASE_URL, {Notebooklm Mcp (MCP server)
Compatibility: Not stated.
Stop jumping between browser tabs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
src/notebooklm_mcp_2026/auth.py:6 - Chrome launched via ``subprocess.Popen(list)`` - never ``shell=True``.Notebooklm Mcp 2026 (MCP server)
Compatibility: Not stated.
<img src="notebooklm_mcp_hero.png" alt="NotebookLM MCP" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
scripts/build-mcpb.mjs:27 fs.rmSync(stage, { recursive: true, force: true });Notion Mcp Server (MCP server)
Compatibility: Not stated.
Give your AI read/write access to Notion with one token and one command.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
docs/tips.md:65 r = requests.get(f"{BASE}/files", headers=HEADERS)Obsidian Cli Rest (MCP server)
Compatibility: Not stated.
Control your Obsidian vault programmatically.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
test-concurrent.js:81 const req = http.request(options, (res) => {Obsidian Mcp Plugin (MCP server)
Compatibility: Not stated.
High-performance Model Context Protocol (MCP) server for Obsidian that provides AI tools with direct vault access through semantic operations and HTTP transport.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:92 @cyanheads/mcp-ts-coreObsidian Mcp Server (MCP server)
Compatibility: Not stated.
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareOctagon Mcp Server (MCP server)
Compatibility: Not stated.
Skills-first Claude Code plugin for Octagon market intelligence, prediction market research, and financial analysis workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
cmd/okf-benchmark/main.go:272 out, _ := exec.Command("sysctl", "-n", "machdep.cpu.brand_string").Output()Okf Agent Memory (MCP server)
Compatibility: Not stated.
Git-native persistent memory for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:26 prepareolcli (MCP server)
Compatibility: Not stated.
Sync and manage Overleaf LaTeX projects from the command line.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:29 prepareOllama Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/auth.js:10 wait handle.close().catch(()=>{});await fs.unlink(lockFile).catch(()=>{})}}catch(err){if(eONCE Exactly-Once Reliability for AI Agent Actions (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.GSterlingPress/once -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_UNNAMED_HOST SECRETS_PATH_UNCONFIRMED
package.json:38 prepareOpen Docs Mcp (MCP server)
Compatibility: Not stated.
An open-source MCP implementation providing document management functionality.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB
python/01_calculate_natal_geo.py:40 response = requests.post(url, headers=headers, json=payload, params=paramsOpen Ephemeris (MCP server)
Compatibility: Not stated.
**Use it in Claude:** add `https://mcp.openephemeris.com/mcp` as a custom connector (leave the OAuth Client ID and Secret blank) or install the Open Ephemeris plugin from the Claude directory.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
src/openclaw/client.ts:66 const response = await fetch(url, {Openclaw Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.freema/openclaw-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
monitoring/cli.py:246 done = subprocess.run(cmd, capture_output=True, timeout=900)Opentargets Mcp (MCP server)
Compatibility: Not stated.
A read-only MCP server for exploring targets, diseases, drugs and genetic evidence through the [Open Targets Platform](https://platform.opentargets.org/).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
packages/openwriter/scripts/prepublish.cjs:71 fs.rmSync(distPlugins, { recursive: true, force: true });openwriter (MCP server)
Compatibility: Not stated.
**Your agent writes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/live_alert.py:432 with urllib.request.urlopen(request, timeout=20) as response:Opik Mcp (MCP server)
Compatibility: Not stated.
**The official Model Context Protocol (MCP) server for [Opik](https://github.com/comet-ml/opik), the open-source LLM observability and evaluation platform, built by [Comet](https://www.comet.com).** Plug your AI host (Claude Code, Cursor, VS Code Copilot, Codex, opencode, or any
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/mutate.py:601 finished = subprocess.run(Option Desk (MCP server)
Compatibility: Not stated.
Option analytics over the SYNTH sample or a permitted chain: Greeks, positioning, payoffs, plots.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
infra/telemetry-worker/src/index.ts:17 await fetch(env.DISCORD_WEBHOOK_URL, {OrangePro (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://github.com/OrangeproAI/orangepro-mcp/raw/main/docs/logo-horizontal.svg" alt="OrangePro" width="320" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/package-smoke.mjs:56 fs.rmSync(temporary, { recursive: true, force: true });OrchestrUI (MCP server)
Compatibility: Not stated.
<p align="right"> <a href="README_RU.md">Русская версия</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:18 prepareOutline Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server for [Outline](https://www.getoutline.com/) that enables reading and writing documents through the Outline API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
src/overleaf_mcp/capability.py:32 result = subprocess.run(Overleaf Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/ghostiee-11/overleaf-mcp/main/docs/hero.png" alt="overleaf-mcp.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/owl_mcp/owl_api.py:242 subprocess.run(["make", MAKEFILE_NORMALIZE_RULE], check=True)Owl Mcp (MCP server)
Compatibility: Not stated.
OWL-MCP is a Model-Context-Protocol (MCP) server for working with Web Ontology Language (OWL) ontologies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST
functions/mcp.js:285 const res = await context.env.ASSETS.fetch(`${origin}${path}index.md`);OwnerSpec (MCP server)
Compatibility: Not stated.
The official [Model Context Protocol](https://modelcontextprotocol.io) server for [OwnerSpec.com](https://ownerspec.com), an independent, numbers-first reference for the equipment people own and maintain at home, in three categories: home water treatment (softeners, sediment and
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
stdio.mjs:29 const res = await worker.fetch(req, env, ctx);Package Intel MCP (MCP server)
Compatibility: Not stated.
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:22 postinstallPageIndex MCP (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://pageindex.ai/mcp"> <img src="https://docs.pageindex.ai/images/general/mcp_banner.jpg"> </a> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
build-mcpb.py:101 os.remove(os.path.join(dirpath, name))PageSpeed Insights MCP (MCP server)
Compatibility: Not stated.
One run is noise, so this reports the median of several distinct PageSpeed analyses and the spread.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
src/configure.ts:418 fs.unlinkSync(rulePath);Paper Lantern (MCP server)
Compatibility: Not stated.
Research intelligence for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/patchwork/miners/git_patterns.py:43 result = subprocess.run( # nosec B603 - list args, no shell=True, cwdpatchwork Codebase Conventions for AI Agents (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.SaiNarayana-B/patchwork -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/api.ts:31 const response = await fetch(`${apiBaseUrl()}${endpoint}`, {Paydirt (MCP server)
Compatibility: Not stated.
MCP Registry name: `io.github.Paydirt-AI/paydirt-mcp`
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST
package.json:56 postinstallpeek (MCP server)
Compatibility: Not stated.
<img src="https://raw.githubusercontent.com/Cubenest/rrweb-stack/main/assets/brand/sub-peek.svg" height="40" alt="peek">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:41 preparePeepTrend: YouTube Gaming Trend Finder (MCP server)
Compatibility: Not stated.
Find rising Steam games and YouTube content opportunities before the niche gets crowded.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
extensions/git-checkpoint.ts:119 fs.rmSync(dir, { recursive: true, force: true })Pi Code (MCP server)
Compatibility: Not stated.
\
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
.gitignore:5 .npmrcPi Delegate Mcp (MCP server)
Compatibility: Not stated.
``` ██████╗ ██╗ ██████╗ ███████╗██╗ ███████╗ ██████╗ █████╗ ████████╗███████╗ ██╔══██╗██║ ██╔══██╗██╔════╝██║ ██╔════╝██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ██████╔╝██║ ██║ ██║█████╗ ██║ █████╗ ██║ ███╗███████║ ██║ █████╗ ██╔═══╝ ██║ ██║ ██║██╔══╝ ██║ ██╔══╝ ██║ ██║██╔══██║ ██║ ██╔══
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
examples/openclaw_pic_bridge_demo.py:101 with urllib.request.urlopen(req, timeout=5) as resp:Pic Standard (MCP server)
Compatibility: Not stated.
**Local-first.
This grade is a hygiene screen, not proof of safety.
