Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 651 to 700 of 1,860 MCP, Grade C entries. Page 14 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/sift-light/concept-worker.mjs:429 const response = await fetch(`https://huggingface.co/${CONCEPT_MODELSift Light (MCP server)
Compatibility: Not stated.
English · [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
websites/tasks.py:324 result = subprocess.run(Silicon Friendly (MCP server)
Compatibility: Not stated.
Check if any website on the internet is AI-agent-friendly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:21 prepareSkolverket MCP (MCP server)
Compatibility: Not stated.
<img width="700" height="220" alt="Skolverket MCP logo" src="https://github.com/user-attachments/assets/74563bdb-eea4-4276-a58c-ec89b11806ed" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:23 prepareSkylight Mcp (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server for the Skylight Calendar API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:44 prepareSnapshot Site (MCP server)
Compatibility: Not stated.
Official MCP server for the Snapshot Site API
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/core/diagrams.ts:21 const request = requests.get(id);sourcey (MCP server)
Compatibility: Not stated.
Precision documentation from OpenAPI, MCP, Doxygen, and Markdown guides.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:7 prepareSp500 Mcp Server (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/readme-poster.png" alt="S&P 500 MCP promotional poster" width="100%" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
package.json:53 preparespecmate (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/utils/gitClone.ts:229 for (const entry of await fs.readdir(target)) await fs.rm(join(target, entry), { recSpecPilot (MCP server)
Compatibility: Not stated.
SpecPilot is a spec-driven development (SDD) CLI for AI coding agents like Claude Code, Cursor, and ChatGPT.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_UNCONFIRMED +1 more
index.js:116 const res = await fetch(url, { ...opts, signal: ctrl.signal, heaSpecularis AI Visibility Audit (MCP server)
Compatibility: Not stated.
Run a free AI visibility (GEO/AEO) audit on any website from inside Claude, ChatGPT, or any MCP client , checks whether ChatGPT, Claude & Perplexity can find and cite it, with an instant snapshot and an optional full scored PDF report.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
src/spotify_scraper/browser/login.py:128 shutil.rmtree(user_data_dir, ignore_errors=True)SpotifyScraper (MCP server)
Compatibility: Not stated.
Extract public Spotify data , tracks, albums, artists, playlists, podcasts & lyrics , without the official API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
cmd/ssh-mcp/install.go:63 cmd.Flags().String("ssh-config", "", "Path to SSH config file (default: ~/.ssh/confiSsh Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.gif" width="100%" alt="ssh-mcp: an MCP server that gives AI assistants secure, scoped SSH access to remote servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/verify-deploy.sh:23 CURL=(curl -s --max-time 90)Star Wars MCP (MCP server)
Compatibility: Not stated.
Star Wars API (SWAPI) as a remote MCP server: films, people, planets, species, starships, vehicles.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:35 prepareStitchAPI Docs (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://stand-with-ukraine.pp.ua"><img alt="Stand With Ukraine" src="https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/banner2-direct.svg" /></a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/session/SessionManager.ts:302 await fs.unlink(filePath)Sub Agents Mcp (MCP server)
Compatibility: Not stated.
Run reusable coding agents from any MCP-compatible client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:24 prepareSubio Mcp (MCP server)
Compatibility: Not stated.
Scrape public posts from X, LinkedIn, Hacker News and Reddit in a local browser that is never signed in.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
src/api/substack/image.spec.js:63 await fs.rm(dir, {recursive: true, force: true});Substack Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) Server for [Substack](https://substack.com) enabling LLM clients to interact with Substack's API for automations like creating posts, managing drafts, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
playground/index.ts:16 headers: process.env.KRATOS_API_KEYsufetch (MCP server)
Compatibility: Not stated.
<p> <a href="https://www.npmjs.com/package/sufetch"><img src="https://img.shields.io/npm/v/sufetch.svg?style=flat&colorA=18181B&colorB=28CF8D" alt="Version"></a> <a href="https://www.npmjs.com/package/sufetch"><img src="https://img.shields.io/npm/dm/sufetch.svg?style=flat&colorA=
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/open_catalog_resync.py:154 result = subprocess.run(Sugra API (MCP server)
Compatibility: Not stated.
Gateway between LLM agents and world data through eight tools and a bundled endpoint catalog.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
bin/install.js:215 fs.rmSync(rt, { recursive: true, force: true });Supercmo Skills (MCP server)
Compatibility: Not stated.
Open, model-agnostic, BYO-keys marketing skills for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
agents/README.md:19 curl -o .claude/agents/sverklo-explore.md \sverklo (MCP server)
Compatibility: Not stated.
<p align="left"> <img src="./docs/logo.svg" alt="sverklo" width="280" height="79"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
hooks/lib.js:328 if (now - fs.statSync(p).mtimeMs >= ttlMs) fs.unlinkSync(p);Symvanta (MCP server)
Compatibility: Not stated.
Connects the Symvanta code-graph MCP server and steers agents to its tools instead of shell search: the MCP connection, a SessionStart context primer, a skill, slash commands, read-only subagents, and a family of non-blocking augmenters on Grep/Glob, Bash code searches (grep/rg/g
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
release.sh:565 if command -v curl >/dev/null 2>&1; thenTailscale Mcp (MCP server)
Compatibility: Not stated.
One click adds this to your local Yaw MCP config so it's available in every Yaw Terminal session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:27 prepareTam Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol server providing market research and business analysis capabilities through 28 tools, 15 business prompts, and integration with 8 economic data sources.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +1 more
examples/chrome_youtube_demo.py:50 subprocess.Popen(args)Tarsier (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>🐒 Tarsier-AI</h1> <p><b>Accessibility Trees as a Portable Semantic Representation for Agentic GUI Control</b></p> <p><i>The "Playwright" for Cross-Platform Desktop & Web Apps.</i></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:16 prepareTavily MCP Server (MCP server)
Compatibility: Not stated.
The Model Context Protocol (MCP) is an open standard that enables AI systems to interact seamlessly with various data sources and tools, facilitating secure, two-way connections.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/tg_business_bridge/config.py:50 res = subprocess.run(Telegram Business Bridge (MCP server)
Compatibility: Not stated.
**Connect any AI agent to your personal Telegram messages , through the official Telegram Business API.** No userbot, no MTProto session, no risk of losing your account.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
client.mjs:585 const response = await fetch(origin + path, {TERM (MCP server)
Compatibility: Not stated.
A forum whose members are AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
terminal_server.py:23 result = subprocess.run(command, shell=True, cwd=DEFAULT_WORKSPACE, capture_output=True,terminal_server (MCP server)
Compatibility: Not stated.
Welcome to **The AI Language** project!
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
requirements.txt:1 fastapi>=0.128,<1TestGraph (MCP server)
Compatibility: Not stated.
**TestGraph is an experimental shared knowledge and experience graph for AI assistants.** It lets independent AI clients contribute to the same graph while preserving the original human evidence, model attribution, disagreement, confidence and the path by which a conclusion was r
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
src/text_to_speech_mcp/runner.py:111 subprocess.run(Text to Speech (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Engr-FaizanAli/text-to-speech -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/audit_live.sh:55 INIT=$(curl -sf --max-time 10 \ThinkNEO Control Plane (MCP server)
Compatibility: Not stated.
Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:35 curl -fsSL https://tinystruct.org/create | shtinystruct (MCP server)
Compatibility: Not stated.
A lightweight, modular Java application framework for web and CLI development, designed for AI integration and plugin-based architecture.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/cert_helper.py:187 proc = subprocess.run(TLS Radar (MCP server)
Compatibility: Not stated.
SSL/TLS certificate monitoring and free Let's Encrypt issuance inside Claude Code and Cowork, through a single MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
package.json:23 @modelcontextprotocol/sdkTokenOracle (MCP server)
Compatibility: Not stated.
Hosted MCP server for LLM cost estimation, model comparison, and budget-aware routing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
packages/runner/scripts/build.ts:42 const buildCommand = new Deno.Command(Deno.execPath(), {toolbase (MCP server)
Compatibility: Not stated.
> ⚠️ We’re currently in the process of updating the open-source Toolbase repository to reflect our latest changes after testing with alpha testers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:94 @cyanheads/mcp-ts-coreToolkit Mcp Server (MCP server)
Compatibility: Not stated.
Generate random IDs, QR codes, and hashes, encode and decode values, and geolocate IPs, plus gated network and system diagnostics, via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/TALXIS.CLI.MCP/Program.cs:759 ["description"] = "ID of the skill to fetch (e.g. 'component-creation', 'depTools Cli (MCP server)
Compatibility: Not stated.
> [!WARNING] > This project is currently in a development phase and not ready for production use.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:26 postinstallToonify Mcp (MCP server)
Compatibility: Not stated.
Local context compression for Claude Code workflows, including structured data and debug-heavy output.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/launch_tv_debug_linux.sh:59 if curl -s "http://localhost:$PORT/json/version" > /dev/null 2>&1; thenTradingview Mcp Jackson (MCP server)
Compatibility: Not stated.
> **drasticstatic working copy** , Used by the [Fortuna trading system](https://github.com/drasticstatic/trading-assistant).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/tp_mcp/auth/encrypted.py:52 result = subprocess.run(Trainingpeaks Mcp (MCP server)
Compatibility: Not stated.
<a href="https://glama.ai/mcp/servers/@JamsusMaximus/TrainingPeaks-MCP"> <img width="380" height="200" src="https://glama.ai/mcp/servers/@JamsusMaximus/TrainingPeaks-MCP/badge" alt="TrainingPeaks MCP server" /> </a>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
wiki/Deployment.md:65 curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bashTrello Desktop Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides comprehensive Trello integration for any MCP-compatible client , including Claude Desktop, Claude Code, Gemini CLI, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/languages/python.rs:361 // requests.get(url, headers={"Authorization": "Bearer ..."})Trestle (MCP server)
Compatibility: Not stated.
<p align="left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/logo-dark.svg"> <img src="assets/logo-light.svg" alt="Trestle logo" height="18"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/bench_compare.py:83 shutil.rmtree(target, ignore_errors=True)turbovault (MCP server)
Compatibility: Not stated.
- MCP Registry name: `mcp-name: io.github.epistates/turbovault`
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
skills/tw-legal-rag/scripts/search_judgments.py:47 proc = subprocess.run(cmd)Tw Legal Rag (MCP server)
Compatibility: Not stated.
台灣法律 MCP 伺服器 + CLI（免費、免註冊、免 API key）：2,250 萬筆裁判書、行政函釋、憲法法庭裁判，附引用查核。Free Taiwan legal MCP server for Claude/ChatGPT/Codex , bring your own LLM, retrieval-only.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:57 prepareUs Gov Open Data Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
package.json:11 postinstallUs Legal Mcp (MCP server)
Compatibility: Not stated.
> **Comprehensive US legal data in your AI workflow.** Search Congress bills, Federal Register documents, court opinions, and committees.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:20 prepareUx Mcp Server (MCP server)
Compatibility: Not stated.
Model Context Protocol (MCP) server that provides comprehensive UX best practices covering the complete UX ecosystem: accessibility guidelines (WCAG), usability heuristics (Nielsen), UI patterns, design systems, performance optimization, SEO, internationalization, animation, fram
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
scripts/install.sh:41 response="$(curl -fsSL "${api_url}")" || fail "failed to fetch latest release metadata fuxc (MCP server)
Compatibility: Not stated.
**One CLI for tools across protocols**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:23 prepareVertex Ai Mcp Server (MCP server)
Compatibility: Not stated.
This project implements a Model Context Protocol (MCP) server that provides a comprehensive suite of tools for interacting with Google Cloud's Vertex AI Gemini models, focusing on coding assistance and general query answering.
This grade is a hygiene screen, not proof of safety.
