Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1601 to 1650 of 1,860 MCP, Grade C entries. Page 33 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
package.json:33 prepareProxmox Mcp Server (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server for **Proxmox VE and Proxmox Datacenter Manager**, connecting your virtualization infrastructure to AI tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:32 preparePseudonym Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src=".github/assets/hero.jpg" alt="pseudonym-mcp , mask PII locally, send safely to a cloud LLM, restore instantly" width="1200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/psn/auth.ts:54 const res = await fetch(`${AUTH_BASE}/authorize?${params}`, {Psn Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
ptc-cli.sh:4508 out = subprocess.run(["git", "-C", root, "ls-files", "-z", "--cached", "--others", "--exclude-Ptc Cli (MCP server)
Compatibility: Not stated.
> **Source of truth: `cli/` in `ci18n/private-translation-cloud`.** > This directory is where the CLI is developed and gated (`cli-tests` in > `.gitlab-ci/component-tests.yml`).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
client-plugin/server/src/relay/async_runs.py:209 os.remove(self._path(old_id))relay (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/HarperZ9/relay/main/docs/art/hero-dark.svg"> <img src="https://raw.githubusercontent.com/HarperZ9/relay/main/docs/art/hero-light.svg" alt="relay: Accountable coding agent that runs on
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
src/integration/gallery-flow-stdio.e2e.ts:279 await fs.rm(tokenDir, { recursive: true, force: true });Reportflow Mcp (MCP server)
Compatibility: Not stated.
Official display name: **Re:port Flow MCP**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
install.sh:54 curl -fsSL "https://github.com/$REPO/releases/latest/download/ripple-$triple.tar.gz" | tar -xz -ripple (MCP server)
Compatibility: Not stated.
**Code impact and review targeting, built for AI agents.** Give it a change and it tells you what is likely to break, ranked by risk.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +2 more
src/channel.mjs:218 if (fs.readFileSync(file, "utf8").trim() === String(pid)) fs.unlinkSync(file);Salt Mcp (MCP server)
Compatibility: Not stated.
Chat, pay, and hire on Salt (saltapp.ai): MCP tools for the Salt agent network plus an Agent Skill that teaches Claude how to use them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/index.ts:227 res = await fetch(url, {Scorezilla Mcp (MCP server)
Compatibility: Not stated.
**Add a global leaderboard to your game by asking Claude Code or Cursor.** The SDK it wires in is ~5 KB gzipped, with zero runtime dependencies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
install.sh:458 printf ' curl "%s/api/ping?uid=%s&type=ai&project=my-agent&event=page_view&c=Austin&cc=Travis&sSeriouslySimpleAnalytics (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
vision_mcp/backends.py:57 resp = httpx.post(url, headers=headers, json=json, timeout=timeout)Shadow Vision (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.svg" width="100%" alt="Shadow Vision , Open-source MCP vision service granting text-only LLMs image understanding, OCR, and visual analysis capabilities"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:20 postinstallSocial Forex (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
mcp/server.mjs:740 if (owner) fs.unlinkSync(path.join(lock, owner))specdrive (MCP server)
Compatibility: Not stated.
**Your idea, built properly.** SpecDrive is a free, open-source Mac app that makes spec-driven development effortless for people who don't code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:9 curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \Sswp Mcp (MCP server)
Compatibility: Not stated.
SSWP records what configured software checks actually establish.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
deploy.sh:164 if docker compose exec -T web wget -q -O /dev/null http://127.0.0.1:8080/health >/dev/null 2>&1;submail (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="apps/web/public/submail-logo.png" alt="Submail logo" width="112" height="112"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:19 > curl -LsSf https://agnt5.com/cli.sh | bashtemplates (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://agnt5.com"><img src="https://agnt5.com/images/github/github-repo-sdk-banner.png" alt="AGNT5: the reliable platform for AI agents and workflows" width="100%"></a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED SECRETS_PATH_DOTENV
src/quantize.py:98 subprocess.run(Thermal Agent (MCP server)
Compatibility: Not stated.
> **A tool-using agent + physics simulator for recommending thermal mitigation strategies in deep space photonic instruments , runs on managed AWS Bedrock or a self-hosted, fine-tuned open-weight model**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
tokendamper-benchmark/run_benchmark.py:63 process = subprocess.run(TokenDamper (MCP server)
Compatibility: Not stated.
<h1 align="center">TokenDamper</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
examples/x402-server/src/index.ts:208 const res = await fetch("https://api.ipify.org");Ton Agent Kit (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/hero.png" alt="TON Agent Kit" width="1000"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/core/state.ts:98 await fs.rm(tmp, { force: true }).catch(() => {});tossinbox (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/logo.png" width="140" alt="TossInbox logo: an envelope tossed into a trash bin"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:23 prepareTrading212 Mcp (MCP server)
Compatibility: Not stated.
Connect Node.js applications and AI assistants to the Trading 212 public API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
scripts/agents/src/tools/git-tools.ts:15 * If you find yourself reaching for `child_process.execSync` here, stUltra Jira Mcp (MCP server)
Compatibility: Not stated.
A token-efficient **Jira MCP server** and CLI for Claude, ChatGPT, Cursor, Cline, and any other Model Context Protocol (MCP) client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
packages/core/src/database/sqlite-project-lifecycle.test.ts:17 fs.rmSync(projectsDirectory, { recursive: true,Understanding Graph (MCP server)
Compatibility: Not stated.
A persistent medium for fluid, emergent understanding
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
app/main.py:1147 p = subprocess.run(Unifi Announcer (MCP server)
Compatibility: Not stated.
**Turn a UniFi Protect Smart Chime into a local, programmable announcement speaker.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
mcp-server/src/core/daemonClient.js:37 const response = await fetch(registry.healthUrl, { signal: controller.sUnity Editor Mcp (MCP server)
Compatibility: Not stated.
> ⚠️ **This project is in beta and under heavy development.** Features and APIs may change.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
mcp-server/veriswarm_mcp/hooks/activity_reporter.py:208 response = httpx.post(Veriswarm Sdk (MCP server)
Compatibility: Not stated.
Official client libraries, MCP server, and plugins for [VeriSwarm](https://veriswarm.ai) , trust infrastructure for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:15 prepareWeb Search Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) server that gives any MCP client web search powered by the Google Custom Search API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
packages/dsh-web/src/tools.ts:765 return operations.fetch(normalizeFetch(args), exec.signal);web (MCP server)
Compatibility: Not stated.
Guion Web is a Node.js web research toolkit.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README_CN.md:17 curl -sSL https://raw.githubusercontent.com/fastclaw-ai/weclaw/main/install.sh | shweclaw (MCP server)
Compatibility: Not stated.
Go to the project page here:
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
wp-ai-bridge/admin/views/api-keys-section.php:541 fetch(ajaxurl, {Wp Ai Bridge (MCP server)
Compatibility: Not stated.
A WordPress plugin that exposes secure REST endpoints for content management via **per-user API keys** or **OAuth2** (Authorization Code flow).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
audit/run2.mjs:90 const html = await fetch("http://127.0.0.1:8090/").then((r) => r.text()).catch(() => "");wpxmcp (MCP server)
Compatibility: Not stated.
**The open-source MCP server that runs your WordPress sites like a senior admin would** , content, design, plugins, SEO, performance, security and the whole fleet, from Claude, ChatGPT, Cursor or any MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/utils/proxy.ts:25 const response = await fetch(`${config.apiUrl}/mcp/call`, {Adrex Ai (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">Adrex AI</h1> <p align="center"> <strong>Open-source MCP server for Google Ads & Meta Ads</strong> </p> <p align="center"> Manage your ad campaigns in plain English from Claude Code, Cursor, Codex, Gemini, or any MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
examples/agent-launcher/launch-claude.sh:87 curl -fsS -m 20 "$KANBAN_URL$1"Agent Kanban (MCP server)
Compatibility: Not stated.
> Local-first kanban for AI-agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:39 RUN curl -fsSL https://deb.nodesource.com/setup_18.x | bash - \AgentX (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://img.shields.io/github/license/conversition/AgentX" alt="License"/> <img src="https://img.shields.io/github/languages/top/conversition/AgentX" alt="Top Language"/> <img src="https://img.shields.io/github/languages/count/conversition/AgentX" alt
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:46 postinstallAi Browser (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:56 postinstallaimem (MCP server)
Compatibility: Not stated.
**Your AI coding assistant forgets.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
bench/cross-machine-tokens/measure_tokens.py:56 shutil.rmtree(snap)anamnesis (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/build_claude_plugin.py:69 return subprocess.run([git, *args], cwd=repo, capture_output=True, timeout=1articulate (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/HarperZ9/articulate/main/docs/art/hero-dark.svg"> <img src="https://raw.githubusercontent.com/HarperZ9/articulate/main/docs/art/hero-light.svg" alt="articulate.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
apps/cli/src/main.rs:414 let resp = ax_core::fetch::fetch(&renderer, Some(&cache), &req).await?;ax (MCP server)
Compatibility: Not stated.
> 配置一次，所有 Agent 共享；记忆一次，所有 Agent 认知；工具一次，所有 Agent 调用。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:24 preparebeam (MCP server)
Compatibility: Not stated.
Send text, get a link.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
README.md:117 | Claude Code | none - the app can install it. Or `curl -fsSL https://claude.ai/install.sh \| baBunview Mcp App Host (MCP server)
Compatibility: Not stated.
A minimal desktop scaffold for a native app to connect a user's chatGPT/Claude subscription plan.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
youtrack-mcp/.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/aChatgpt Youtrack Mcp (MCP server)
Compatibility: Not stated.
A self-hosted Rust MCP server for managing YouTrack issues, comments, articles, time tracking, and attachments from ChatGPT or other MCP clients.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
vscode/scripts/package.mjs:75 fs.rmSync(binary, { recursive: true, force: true });Chrome Control Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
scripts/check-grok-pins-fresh.py:20 out = subprocess.check_output(Claude Code Plugins (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
requirements.txt:2 mcp>=1.9.0,<2Claude Google Sheets Mcp (MCP server)
Compatibility: Not stated.
MCP-коннектор, который даёт Claude Code **полноценную работу с Google Таблицами: и чтение, и запись** (штатный коннектор Google Drive умеет только читать).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
data/1.26.40.5/script-types/@minecraft/server-admin/1.0.0-beta/index.d.ts:378 * return http.request(req);codecraft (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/geck_mcp/geck.py:939 process = subprocess.Popen(args, cwd=config.game_dir)Codex Skill Mcp Fallout3 (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/banner.svg" alt="GECK MCP , Fallout 3 meets AI-assisted modding" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/tools/generate-code.tool.ts:282 const response = await fetch("/api/example");Coding Guidelines Mcp Server (MCP server)
Compatibility: Not stated.
An [MCP](https://modelcontextprotocol.io) server that serves a set of coding guidelines to AI assistants , as **resources** they can read, and **tools** they can call to search and validate code against those guidelines.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
packages/company-dossier/deploy/README.md:54 brew install flyctl # or: curl -L https://fly.io/install.sh | shCompany Dossier (MCP server)
Compatibility: Not stated.
Build a complete, sourced intelligence dossier on any company from public records , for humans and agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
docs/indexing/reference/contextualignore-reference.md:66 could point outside the project root (`~/.ssh/id_rsa`Contextual Labs (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset=".github/assets/logo-wordmark-dark.png"> <img src=".github/assets/logo-wordmark-light.png" alt="Contextual Labs" width="100%"> </picture>
This grade is a hygiene screen, not proof of safety.
