Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1801 to 1850 of 1,860 MCP, Grade C entries. Page 37 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
client/Dockerfile:23 RUN curl -LsSf https://astral.sh/uv/install.sh | shMcp Playground (MCP server)
Compatibility: Not stated.
A **Streamlit-based playground** that lets you chat with large language models and seamlessly plug in external **Multi-Server Command Protocol (MCP)** tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
get_d21e14.svg:12 @font-face{font-family:"Inter";src:url("data:font/woff2;base64,d09GMgABAAAAADYEABEAAAAAgLgAAMcp Roblox Profile Lens (MCP server)
Compatibility: Not stated.
> **A companion exploration engine for public Roblox profile landscapes , mapping identities, friendships, achievements, creations, and communities through a single unified surface.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
src/backupPaths.test.ts:33 await fs.rm(root, { recursive: true, force: true });Mcp Server Arangodb (MCP server)
Compatibility: Not stated.
[<img src="./assets/cover.webp" width="420" alt="ArangoDB MCP Server"/>](./assets/cover.webp)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:16 prepareMcp Server Flomo (MCP server)
Compatibility: Not stated.
write notes to Flomo.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV
v0.1/controls/MCP-AUTHZ-03-least-privilege.md:148 subprocess.run(path) # Can execute anythingMcp Server Security Standard (MCP server)
Compatibility: Not stated.
The Model Context Protocol enables AI models to interact with external systems through tools, resources, and prompts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:38 prepareMcp Server (MCP server)
Compatibility: Not stated.
Build AI voice assistants and phone agents with [Vapi](https://vapi.ai) using the [Model Context Protocol](https://modelcontextprotocol.com/).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
src/lite.ts:42 const res = await fetch(url);mcp (MCP server)
Compatibility: Not stated.
[Русская версия](docs/README.ru.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:16 prepareMcp Vnc (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server that enables AI agents to remotely control Windows, Linux, macOS or anything else that can run a VNC server (don't worry, it's probably fine).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
inst/mcp_app/plot-viewer.html:1 <!DOCTYPE html>MCPR (MCP server)
Compatibility: Not stated.
<!-- README.md is generated from README.Rmd.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
payloads.py:38 '../../../../../../root/.ssh/id_rsa'Mcpwn (MCP server)
Compatibility: Not stated.
<!-- donation:eth:start --> <div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/utils/file-operations.js:96 await fs.unlink(filePath);Metabase Ai Assistant (MCP server)
Compatibility: Not stated.
MCP Server for Metabase - 152 tools for dbt metadata sync, reverse lineage exposures, smart question creator, and enterprise BI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/getting-started.md:140 curl -fsSL https://ollama.com/install.sh | shmie (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">MIE - Memory Intelligence Engine</h1> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
SKILL.md:52 curl -fsSLO https://raw.githubusercontent.com/Da7-Tech/mind/v7.0.0/mind.pymind (MCP server)
Compatibility: Not stated.
Local project memory with recall, provenance, policy, and dreams.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:16 prepareMoneybird Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that connects AI assistants like Claude to Moneybird accounting software via API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
package.json:13 postinstallMoo Tasks (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/dizlexic/moo-tasks/refs/heads/main/app/assets/logo.svg" alt="Moo Tasks Logo" width="160" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/install.sh:4 # Usage: curl -sSL https://raw.githubusercontent.com/0ximu/mu/main/scripts/install.sh | smu (MCP server)
Compatibility: Not stated.
<h1 align="center">MU</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
evals/backtest/data.py:74 resp = httpx.get(url, follow_redirects=True, timeout=60)nfl_mcp (MCP server)
Compatibility: Not stated.
> **Win your draft.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/smoke.d/23-workspace.sh:156 os.remove(path)Nt8 Mcp (MCP server)
Compatibility: Not stated.
**Let Claude Code (or any MCP client) write, compile, chart-check and backtest your NinjaTrader 8 NinjaScript , by itself.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/cn-stock-market-shanghai-shenzhen/SKILL.md:65 curl -v -X POST "https://agent.deepnlp.org/agent_router"Onekey Gateway (MCP server)
Compatibility: Not stated.
AI Agent Gateway to Commercial APIs, Skills, MCPs and more using just one access key for most benefits.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
core/feature_selectors.go:54 // inline fragments ("global " + "fetch()") keep their word gap.openserp (MCP server)
Compatibility: Not stated.
**OpenSERP** is a free, open-source SERP API and CLI for Google, Yandex, Baidu, Bing, DuckDuckGo, and Ecosia.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
backend/opentester/cli.py:267 _ = subprocess.run(OpenTester (MCP server)
Compatibility: Not stated.
**MCP-First Testing Execution Infrastructure**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
evals/gptzero.py:112 def fetch(_: argparse.Namespace) -> None:Paper Preflight (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.amos689/paper-preflight -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
public_release/benchmarks/entireio_cli_ranking_public60/full60/results/fff/e58e27b1ba0d_r0.json:15 "output": "pgr (MCP server)
Compatibility: Not stated.
`pgr` is an experimental, stateless MCP server for code search, built as part of research into how coding agents search repositories.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
.cursor/rules/isolation_rules/visual-maps/van-mode-map.mdc:588 Invoke-Expression $tool.Command | Out-NullPlatform Context Exporter (MCP server)
Compatibility: Not stated.
Консольное приложение для экспорта информации о контексте платформы 1С:Предприятие (BSL) из файла справки `shcntx_ru.hbk` в форматы JSON, XML, Markdown и `context` для использования с LLM.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:5 # curl -fsSL https://raw.githubusercontent.com/jaenster/puppeteer-mcp-claude/main/install.sh | baPuppeteer Mcp Claude (MCP server)
Compatibility: Not stated.
<p align="center"> <img src=".github/banner.svg" alt="puppeteer-mcp-claude , browser automation MCP server for Claude" width="100%"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:42 preparePuremd Mcp (MCP server)
Compatibility: Not stated.
Welcome to the Model Context Protocol (MCP) server for [pure.md](https://pure.md).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
src/index.ts:68 async fetch(request: Request, env: Env): Promise<Response> {Resonant Mind (MCP server)
Compatibility: Not stated.
A Postgres-backed cognitive substrate for persistent AI memory, identity, dreams, drives, relationships, and continuity.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/http.ts:41 /** fetch() with redirects followed by hand so every hop is checked with assertPublicUrl. */Reverse Engineer Marketing (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
roampal/profile_manager.py:472 shutil.rmtree(resolved)Roampal Core (MCP server)
Compatibility: Not stated.
<h1 align="center">roampal-core</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
dl_2542df2.svg:12 @font-face{font-family:"Inter";src:url("data:font/woff2;base64,d09GMgABAAAAADYEABEAAAAAgLgAARoblox Studio Agent Bridge (MCP server)
Compatibility: Not stated.
Welcome to **Orbit Studio Forge**, an open-source companion daemon and browser-native command deck that turns Roblox Studio into a shared, conversational construction site.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:29 prepareRozklad Mcp (MCP server)
Compatibility: Not stated.
<h1 align="center">rozkład-mcp 🚆🚌</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
requirements.txt:1 fastembed>=0.3.0searchpin (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.telly6/searchpin -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
scripts/check-mcp-artifacts.py:43 child = subprocess.Popen(args, cwd=cwd, env=env)Sendmux Sdk (MCP server)
Compatibility: Not stated.
Official SDK, CLI, and MCP workspace for Sendmux.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:15 prepareShadcn Ui Mcp Server (MCP server)
Compatibility: Not stated.
MCP server for shadcn/ui component references
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
deploy/aggiorna.sh:31 const res = await fetch(url, { method: "POST", headers });sharebox (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
scripts/deploy-site.mjs:9 const r = await fetch(url, { method, headers: H, body: body && JSON.stringify(body)Sheets Mcp (MCP server)
Compatibility: Not stated.
The power tool for Google Sheets in Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:20 prepareShinzo Ts (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://github.com/shinzo-labs/shinzo-ts"> <img src="https://github.com/user-attachments/assets/64f5e0ae-6924-41b1-b1da-1b22627e5c43" alt="Shinzo Logo" width="180" height="180"> </a> <h1 align="center"> Shinzo TypeScript SDK: Complete Observability f
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:35 prepareShodan Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides access to Shodan API functionality and CVE database, allowing AI assistants to query information about internet-connected devices, services, and vulnerabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
requirements.txt:1 anthropic>=0.40.0Smart Study Agent (MCP server)
Compatibility: Not stated.
> The AI study agent that **learns how you learn** , a reinforcement-learning policy decides *what* you study next, an FSRS memory model decides *when* you review it, and an LLM generates the quizzes in between.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
SMARTTUNE_MCP_IMPLEMENTATION_PLAN.md:344 - `../../.ssh/id_rsa`Smarttune Cli (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/banner-hero.png" alt="SmartTune" width="100%" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
install.sh:45 VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases?per_page=100" \solos (MCP server)
Compatibility: Not stated.
<img src="docs/assets/soleebee-flying-kawaii.png" alt="Soleebee, the flying solOS robot bee mascot, holding a wrench" width="320" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/sonicproof/audio.py:116 out = subprocess.run(cmd, capture_output=True, check=False)sonicproof (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
internal/answers/answers.go:89 if body, err := c.fetch(ctx, VSPURL+"/vibpredmet/"); err != nil {Spbstu Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
src/srclight/cli.py:991 return subprocess.run(srclight (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.srclight/srclight -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:11 prepareSvelte5 Mcp (MCP server)
Compatibility: Not stated.
A specialized Model Context Protocol (MCP) server for Svelte 5 frontend development
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
packages/mcp/scripts/check-generator.mjs:18 fs.rmSync(work, {recursive: true, force: true});Table Bro (MCP server)
Compatibility: Not stated.
Pixel-perfect Material data tables for Angular, and more.\ A Web Components table engine on top of existing UI components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
client/tasogare.js:70 const res = await fetch(API + path, {tasogare (MCP server)
Compatibility: Not stated.
音音和克先生一起读书、一起批注的地方。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
apps/dashboard/components/ReportViewer.tsx:51 fetch("/api/reports")TCalc (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.svg" width="100%" alt="TCalc measures local workspace tokens and turns them into model recommendations and agent-ready context"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/build_app.sh:294 command -v uv >/dev/null 2>&1 || die "'uv' was installed but isn't on PATH. Open a TeTintins Chess Analysis (MCP server)
Compatibility: Not stated.
A chess coach you can actually **talk to**, and one that **doesn't make things up**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
npm/tmux-mcp-rs/bin/tmux-mcp-rs.js:166 fs.rmSync(tmp, { force: true, recursive: true });Tmux Mcp (MCP server)
Compatibility: Not stated.
`tmux-mcp-rs` is a Model Context Protocol (MCP) server for tmux.
This grade is a hygiene screen, not proof of safety.
