Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 701 to 750 of 1,860 MCP, Grade C entries. Page 15 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/main/index.ts:72 fs.unlinkSync(probePath);Vessel Browser (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:17 prepareVibe Check Mcp Server (MCP server)
Compatibility: Not stated.
Vibe Check is a tool that provides mentor-like feedback to AI Agents, preventing tunnel-vision, over-engineering and reasoning lock-in for complex and long-horizon agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:6 mcp>=2.0.0,<3vibeMK (MCP server)
Compatibility: Not stated.
**CheckMK Monitoring via LLM - Professional MCP Server**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:51 prepareVikunja Mcp (MCP server)
Compatibility: Not stated.
``` ┌────────────────────────────────────────────────────────────┐ │ │ │ ██╗ ██╗██╗██╗ ██╗██╗ ██╗███╗ ██╗ ██╗ █████╗ │ │ ██║ ██║██║██║ ██╔╝██║ ██║████╗ ██║ ██║██╔══██╗ │ │ ██║ ██║██║█████╔╝ ██║ ██║██╔██╗ ██║ ██║███████║ │ │ ╚██╗ ██╔╝██║██╔═██╗ ██║ ██║██║╚██╗██║██ ██║██╔══██║ │
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
vivado_session.py:218 self.process: subprocess.Popen[bytes] | None = NoneVivado MCP Native (MCP server)
Compatibility: Not stated.
<p align="center"> <strong>简体中文</strong> | <a href="README.en.md">English</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/smoke_mcp_server.sh:30 proc = subprocess.Popen(Warmplane (MCP server)
Compatibility: Not stated.
**Security controls:** [](docs/OBSERVABILITY.md) [](docs/ENTERPRISE_FEATURES.md) [
Compatibility: Not stated.
MCP server for the Wayback Machine , save URLs, retrieve snapshots, search archives, check status, list screenshots, compare snapshots, and manage cache
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
downloadeBinary.js:41 fs.rmSync(tmpExtractPath, {recursive: true, force: true});Web Browser (kogiQA) (MCP server)
Compatibility: Not stated.
This web browser has been designed to help your agent debug and develop complex web applications.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/evm/services.ts:101 const res = await fetch(url);web3agent (MCP server)
Compatibility: Not stated.
> **See it in production:** [The Arena](https://arena.web3agent.fi) , 11 AI agents trade real capital through Web3Agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
package.json:60 prepareWebmcp React (MCP server)
Compatibility: Not stated.
React hooks for exposing typed tools on `document.modelContext`, aligned with the current [WebMCP](https://github.com/webmachinelearning/webmcp) specification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
cmd/whatsapp-connect-mcp/dashboard.go:48 _ = exec.Command("rundll32", "url.dll,FileProtocolHandler", url).StarWhatsApp Connect (MCP server)
Compatibility: Not stated.
A WhatsApp MCP server shipped as a single static Go binary.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/auth.ts:172 const response = await fetch(TOKEN_URL, {WHOOP Health Signals (MCP server)
Compatibility: Not stated.
A local-first, read-only [Model Context Protocol](https://modelcontextprotocol.io/) server for WHOOP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
test_build.py:17 result = subprocess.run(cmd, capture_output=True, text=True, check=True)Wikipedia Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that retrieves information from Wikipedia to provide context to Large Language Models (LLMs).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
apps/site/lib/github-stars.ts:12 const response = await fetch(`https://api.github.com/repos/${GITHUB_REPO}`, {wilmai (MCP server)
Compatibility: Not stated.
<img src="assets/wilmai_mascot.png" alt="WilmAI mascot" width="150" align="right">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/update.rs:519 "curl failed ({}): {}",Winx Code Agent (MCP server)
Compatibility: Not stated.
<div align="center"> <img src=".github/assets/fairy.png" alt="Winx Logo" width="150" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
public/examples/build.py:26 with urllib.request.urlopen(req, timeout=30) as response:WOCLUB Cube Playground (MCP server)
Compatibility: Not stated.
Shared voxel world for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
docker/codex-policy-launcher.mjs:297 b),"r");fs.fsyncSync(d);fs.closeSync(d);fs.unlinkSync(b);',Workflow MCP (MCP server)
Compatibility: Not stated.
Workflow MCP runs Claude-compatible JavaScript workflow definitions as durable Codex-backed MCP jobs without requiring Agent Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +3 more
scripts/devcheck.ts:156 * Executes a shell command using child_process.spawn and returns a structured result.Workflows Mcp Server (MCP server)
Compatibility: Not stated.
Store, query, and create YAML workflow playbooks for LLM agents via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
scripts/_dstore-sample.js:13 ;Lt.push(i);const e=new Promise((e,s)=>{fetch(i).then(e=>e.text()).then(o=>{constWorkix (MCP server)
Compatibility: Not stated.
Remote jobs, freelance gigs, vacancies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/world_intel_mcp/analysis/aoi.py:1826 "fetch (by event date; ACLED publishes with a reporting lag), "World Intel Mcp (MCP server)
Compatibility: Not stated.
139-tool MCP server for real-time global intelligence from free public APIs: markets, SEC filings, conflict, military, aircraft-cohort early warning, refugee and migration flows, cyber, climate, news, and 30+ domains.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/tools/diagnostics/hang/sessions.ts:210 fs.rmSync(sessionDir, { recursive: true, force: true });Xc Mcp (MCP server)
Compatibility: Not stated.
**An MCP server that lets AI agents build, run and drive iOS apps , without drowning in Xcode's output.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:15 prepareXclaude Plugin (MCP server)
Compatibility: Not stated.
Modular iOS development automation suite.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
plugins/xhostd/skills/xhostd/references/api-reference.md:673 curl -sS --fail-with-body -X PUT \xhost (MCP server)
Compatibility: Not stated.
Claude Code, Codex, and Cursor plugin for [xhostd](https://xhostd.com) , deploy applications, sites, and services.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
docs/benchmarks/run_bigrepo_4backend.py:187 r = subprocess.run(shell, cwd=cwd, capture_output=True, text=True,xmp4 Semantic code knowledge for your stack (MCP server)
Compatibility: Not stated.
OSS libs in your stack, really used: source, tests, callers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
api/v1/alert.py:183 candidates = list(query.fetch())Xposedornot Api (MCP server)
Compatibility: Not stated.
<h1 align="center">XposedOrNot API</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:27 prepareYandex Delivery MCP (MCP server)
Compatibility: Not stated.
MCP-сервер для B2B API Яндекс Доставки , рассчитать стоимость, оформить и отследить отправление из AI-приложения без собственной интеграции
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:26 prepareYango Delivery MCP (MCP server)
Compatibility: Not stated.
MCP server for Yango Delivery’s B2B Express Claims API , quote, book and track courier deliveries from an AI app
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:26 prepareYango Tech Retail MCP (MCP server)
Compatibility: Not stated.
MCP server for Yango Tech Retail , inspect and manage stores, catalog, prices, stock and orders from an AI app
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/yapitalism/demo.py:31 return subprocess.run(Yapitalism (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.AytuncYildizli/yapitalism --> <!-- The MCP Registry verifies PyPI package ownership by finding this string in the package description, which is this README.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
examples/provision-and-call.py:20 r = httpx.post(YG3 Marketing MCP (MCP server)
Compatibility: Not stated.
**Capability query this answers:** *marketing MCP + Claude (or ChatGPT) + site + content + SEO + outbound.*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
packages/ytdl-rmcp/scripts/check-package.js:450 fs.rmSync(tempDir, { recursive: true, force: true });YTDL RMCP (MCP server)
Compatibility: Not stated.
yt-dlp search, download, metadata, delivery, and Plex workflows over MCP and CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/generate_models.py:74 result = subprocess.run(cmd, check=True, capture_output=True, text=True)Zernio (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://zernio.com"> <img src="https://zernio.com/brand/icon-primary.png" alt="Zernio" width="60"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
src/index.ts:1554 const r = await fetch(upstream.toString());Zooza MCP Server (MCP server)
Compatibility: Not stated.
MCP server for Zooza , class scheduling, attendance, and booking for activity businesses.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
scripts/check-env.py:46 result = subprocess.run(cmd, capture_output=True, text=True, timeout=10)Zotero Mcp Workbuddy Guide (MCP server)
Compatibility: Not stated.
> 基于 [54yyyu/zotero-mcp](https://github.com/54yyyu/zotero-mcp)（v0.4.1, 3.4k+ stars） > 专为 WorkBuddy 用户设计 · 一份文档，人机共用
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/llm/client.ts:166 const res = await fetch(`${this.cfg.llmBaseUrl}/models`, { headers: this.headers() });ableton-mind Ableton Live MCP server (MCP server)
Compatibility: Not stated.
Definitive MCP (Model Context Protocol) server for **Ableton Live**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/postinstall.cjs:89 curl -fsSL https://bun.sh/install | bashAgent Bridge (MCP server)
Compatibility: Not stated.
A local bridge for bidirectional collaboration between Claude Code and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
directory/cards.py:71 f'curl -sS -i -X POST "{url}" 'agent-tools (x402 + MCP + A2A directory) (MCP server)
Compatibility: Not stated.
The server that powers [agent-tools.cloud](https://agent-tools.cloud) , an open directory of **x402 paid services** with a free MCP discovery endpoint.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:19 prepareAgentql Mcp (MCP server)
Compatibility: Not stated.
This is a Model Context Protocol (MCP) server that integrates [AgentQL](https://agentql.com)'s data extraction capabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
agent_tasker_mcp/executors/http.py:137 with urllib.request.urlopen(req, timeout=remaining, context=context) asAgentTasker MCP Server (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.S3bRR/agent-tasker-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/setup-env.sh:12 echo " curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bashAi Agents Orchestrator (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/logic.ts:256 const response = await fetch(url, {AI Text Summarizer API (MCP server)
Compatibility: Not stated.
AI text and URL summarizer -- key points, word count reduction, reading time.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:29 postinstallai.etincel/etincel-nonfiction (MCP server)
Compatibility: Portable across standard formats.
Trainable non-fiction writing voice, presets, and an anti-AI-tells audit for Claude, via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:8 # curl -fsSL https://raw.githubusercontent.com/Auctalis/nocturnusai/main/install.sh | bashai.nocturnus/logic-server (MCP server)
Compatibility: Not stated.
Agent reasoning, memory, and token-optimized context for AI applications.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/gemini-media.ts:145 const response = await fetch(source.data);ai.smithery/Artin0123-gemini-image-mcp-server (MCP server)
Compatibility: Not stated.
Analyze images and videos with Gemini to get fast, reliable visual insights.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
PUBLISHING.md:170 curl -L https://fly.io/install.sh | shai.smithery/infranodus-mcp-server-infranodus (MCP server)
Compatibility: Not stated.
Map text into knowledge graphs to create a structured representation of conceptual relations and t…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
paper_search_mcp/server.py:49 returned by this function can be passed to the fetch() tool to obtain fullai.smithery/morosss-sdfsdf (MCP server)
Compatibility: Not stated.
Find academic papers across major sources like arXiv, PubMed, bioRxiv, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:14 RUN curl -LsSf https://astral.sh/uv/install.sh | shai.smithery/PabloLec-keyprobe-mcp (MCP server)
Compatibility: Not stated.
Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/resolveFile.ts:68 const response = await fetch(input.url);ai.tuteliq/mcp (MCP server)
Compatibility: Not stated.
Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
setup.sh:6 # curl -fsSL https://raw.githubusercontent.com/rashidazarang/airtable-mcp/main/setup.sh | bashAirtable Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server for Airtable with full CRUD operations, schema management, record comments, webhooks, batch operations, governance controls, and AI-powered analytics.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/ci.yml:24 run: curl -fsSL https://raw.githubusercontent.com/databricks/setup-cli/main/instalAlchemylake Databricks (MCP server)
Compatibility: Not stated.
<p align="center"> <img src=".github/sol-invictus-lapis.png" alt="AlchemyLake , Sol Invictus engraving on the lapis plate" width="640"> </p>
This grade is a hygiene screen, not proof of safety.
