Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 251 to 300 of 1,860 MCP, Grade C entries. Page 6 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
npm/install.js:18 // and HEIDES_VERSION is honoured so the same pin works for the curl installerHEIDES (MCP server)
Compatibility: Not stated.
HEIDES is a deterministic harness that gives AI coding agents what they do not have on their own: a persistent map of the code, warnings derived from that map, and a verdict before a patch lands.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
tasks/plan.md:329 **Description.** Shell out to the `releaseguard` binary. Signature: `runReleaseGuard(target:Helixar Security (MCP server)
Compatibility: Not stated.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/hive-build/SKILL.md:42 r = requests.post(Hive Sdk (MCP server)
Compatibility: Not stated.
One OAuth-ready connection for evidence-backed crypto due diligence, with sources, freshness, and a runtime receipt on every Hive call.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
plugins/hermes-hmem/__init__.py:71 result = subprocess.run(hmem Humanlike Memory for AI Agents (MCP server)
Compatibility: Not stated.
> Your AI forgets everything between sessions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/benchmark.mjs:39 const res = await fetch(`${BASE}/v1/chat/completions`, {Houtini Lm (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="https://raw.githubusercontent.com/houtini-ai/houtini-lm/main/assets/logo.png" width="120" height="120" alt="Houtini LM" /> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
benchmarks/manifest.py:35 return subprocess.check_output(["git", *args], cwd=ROOT,hubmesh (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.DemigodDSK/hubmesh -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
requirements.txt:1 mcp>=1.0.0Humanity Commons (MCP server)
Compatibility: Not stated.
**Open infrastructure for humans and AI agents to contribute, verify, challenge, preserve, and reuse knowledge for measurable human benefit.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:43 preparehumanjs (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./.github/banner.jpg" alt="HumanJS , humanize your browser automation" width="640"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
assets/purchase-preparer.mjs:29 const response=await fetch(new URL('../service-offers.json',import.meta.url),{HyperXosist-Agent Remote MCP (MCP server)
Compatibility: Not stated.
**Agent-first toolkit and Remote MCP server for noise-reduced X (Twitter) search planning and Feedback-to-Fix engineering handoffs.** It generates structured search plans and official X search URLs for humans and AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:11 postinstallI18N Agent (MCP server)
Compatibility: Not stated.
AI-powered translation for 48 languages with context-aware quality
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
email/imap-client.js:90 const fetch = imap.seq.fetch(range, {Icloud Mcp (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="assets/banner-dark.svg"> <img src="assets/banner-light.svg" alt="icloud-mcp banner: Mail, Calendar, Contacts, Reminders, Notes, Messages and Safari for your AI assistant"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
src/idamesh/bootstrap/plugin_main.py:371 subprocess.Popen(argv, **popen_kwargs) # noqa: S603 - detached singleidamesh (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server for **IDA Pro**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:27 prepareIgnite UI Theming MCP Server (MCP server)
Compatibility: Not stated.
<h1 align="center"> Ignite UI Theming - from Infragistics </h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:30 prepareImagegen Mcp (MCP server)
Compatibility: Not stated.
This project provides a server implementation based on the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) that acts as a wrapper around OpenAI's Image Generation and Editing APIs (see [OpenAI documentation](https://platform.openai.com/docs/api-refere
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
demo_server/render_server.py:35 out = subprocess.run(Imprint PDF (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.263311487-ux/imprint-pdf -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:42 postinstallIn Memoria (MCP server)
Compatibility: Not stated.
**Giving AI coding assistants a memory that actually persists.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/traffic.py:113 subprocess.run(["scp", "-o", "ConnectTimeout=12", f"{DROPLET}:{REMOTE_LOG}", tmp], checinfo.agentrank/agentrank (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:41 prepareINITE AI Visibility (MCP server)
Compatibility: Not stated.
See how ChatGPT, Claude, Gemini and Perplexity read any website.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
package.json:41 @modelcontextprotocol/sdkINITE Club (MCP server)
Compatibility: Not stated.
Ask the agent of someone whose calendar you could not get.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
mcp_server.py:53 key_filepath: Annotated[Optional[str], Field(description="Absolute path to a private key fileInterminal (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.QiuwenZheng/interminal -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:22 prepareIntoDNS.ai DNS & Email Security Scanner (MCP server)
Compatibility: Not stated.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
plugin/src/invara/assurance/execute.py:508 with socket.create_connection(("127.0.0.1", port), timeout=remaininINVARA (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Jujitae/invara -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
src/InvoiceXml.Mcp.Core/Options/FileInputOptions.cs:22 /// <summary>Overall timeout for a single URL fetch (coInvoiceXML (MCP server)
Compatibility: Not stated.
Create, validate, convert & extract compliant e-invoices (UBL, Factur-X, ZUGFeRD, XRechnung)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
python/src/artifacta_mcp/path_confinement.py:132 os.path.join(home, ".netrc"),io.artifacta/mcp (MCP server)
Compatibility: Not stated.
Official MCP server for [Artifacta](https://artifacta.io) , an artifact store purpose-built for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/capacitor-mcp (MCP server)
Compatibility: Not stated.
Unofficial MCP server for the official [Capacitor](https://capacitorjs.com) documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/ionic-framework-mcp (MCP server)
Compatibility: Not stated.
Unofficial MCP server for the official [Ionic Framework](https://ionicframework.com) documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:15 prepareio.capawesome/mcp (MCP server)
Compatibility: Not stated.
The official MCP server for [Capawesome](https://capawesome.io).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/buy-oracle.mjs:48 fetch(url, {io.github.0rkz/byte-protocol (MCP server)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/inquisitor/backend/analyzer.py:222 result = subprocess.run(io.github.1111111111111111111114oLvT2/inquisitor (MCP server)
Compatibility: Not stated.
Hypothesis-driven problem solving for AI agents: probe, falsify, escalate , never blind-retry.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
src/cli.test.ts:23 fs.rmSync(dir, { recursive: true, force: true })io.github.1gr14/agents-party (MCP server)
Compatibility: Not stated.
/party , one channel where your agent sessions talk to each other: Claude Code, Cursor, Codex or any other agent, on one machine or across machines.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
src/budget.test.ts:26 fs.unlinkSync(stateFile);io.github.1lystore/mcp-server (MCP server)
Compatibility: Not stated.
MCP server for [1ly.store](https://1ly.store) , Enable AI agents to discover, pay for, and sell APIs using crypto.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
auto_collect_upload.py:151 os.system(f"{sys.executable} -m pip install python-dotenv -q")io.github.365xbusiness/vigo-mcp (MCP server)
Compatibility: Not stated.
> **Regulatory Intelligence Expert · Bilingual AI Agent for Hong Kong SFC Regulations** > > *By [OrphicOne](https://orphicone.com) · English & 繁體中文 · Continuously Updated Knowledge Base*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/repiscope/privacy.py:19 "id_rsa", "id_dsa", "id_ecdsa", "id_ed25519",io.github.3xpr1ment/repiscope (MCP server)
Compatibility: Not stated.
**A periscope for your repos , see everything, touch nothing.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/remediation/providers.ts:381 "Never paste tokens directly into curl commands. Use environment variables inio.github.78degrees/ghosthunt (MCP server)
Compatibility: Not stated.
Find every leaked secret on your machine.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareio.github.AccelByte/ags-extend-sdk-mcp-server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that gives AI assistants (VS Code Copilot, Cursor, Claude, Gemini, Antigravity) the AccelByte Extend SDK as additional context , so they can answer questions about the SDK and generate correct Extend SDK code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:14 prepareio.github.Advertflair/threadmap-mcp (MCP server)
Compatibility: Not stated.
**Conversation drift visualization and forking for Claude.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
showcase/playground.js:238 const resp = await fetch("/health", { method: "GET", signal: AbortSignal.timeout(20io.github.Aimino-Tech/opentalk2html-notmd (MCP server)
Compatibility: Not stated.
> **AI talks to you through beautiful pages , not overwhelming markdown dumps.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
.claude/rules/pytest.md:71 subprocess.run(["git", "init"], cwd=tmp_path, check=True, capture_output=True)io.github.Alberto-Codes/docvet (MCP server)
Compatibility: Not stated.
Real-time docstring quality diagnostics for Python files
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:14 prepareio.github.AmanMakesStuff/mappls-mcp (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server for [Mappls](https://maps.mappls.com) , India's own maps platform (MapMyIndia).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
web/webmcp.js:21 var response = await fetch(path, { headers: Object.assign({ accept: "application/json" }, heaio.github.ANAMIZED/yodmcp (MCP server)
Compatibility: Not stated.
**YodMCP** is a production-oriented **Agent Operating System** kernel on MCP: multi-graph memory, Tasks, Skills, A2A, attestation (software / simulated TEE), OpenTelemetry, and plan-based monetization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:24 prepareio.github.Antonytm/mcp-sitecore-server (MCP server)
Compatibility: Not stated.
This repository contains the source code for the Sitecore Community MCP server , an open-source [Model Context Protocol](https://modelcontextprotocol.io) server that gives AI agents direct read/write access to Sitecore, so you stop copy-pasting between your agent and the Content
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/index.js:43 const res = await fetch(url, opts);io.github.ARCXS-Protocol/mcp-server (MCP server)
Compatibility: Not stated.
**ARCXS Protocol MCP Server** , Universal agent registry, discovery, and cross-protocol messaging for any MCP-compatible AI agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
README.md:30 `okay, could u check disk usage on /root/ path with help of safe-ssh-mcp server on a remote myserio.github.Areso/safe-ssh-mcp (MCP server)
Compatibility: Not stated.
A secure and scoped SSH MCP server for executing read-only diagnostic commands over SSH.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
requirements.txt:1 mcp>=1.0.0io.github.ArkTechNWA/zsh-tool (MCP server)
Compatibility: Not stated.
Zsh shell for Claude Code - full terminal control, live output, PTY mode for interactive commands
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:30 prepareio.github.AryanBV/pdf-toolkit-mcp (MCP server)
Compatibility: Not stated.
> 💼 Available for freelance MCP/AI integration work , DM [@aryansalian03](https://x.com/aryansalian03) or via [aryanbv.com](https://aryanbv.com)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/client.ts:80 return await fetch(this.config.url + path, { ...init, signal: controller.signal });io.github.Asif2BD/umami-mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) server for [Umami Analytics](https://umami.is).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
bench/saber_eval.py:217 subprocess.run(["git", "-C", str(cwd), *args], capture_output=True, check=False)io.github.Atharva-Jayappa/blast-scope (MCP server)
Compatibility: Not stated.
Scores the blast radius of a shell command before your agent runs it , advisory, never blocking.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:18 prepareio.github.AutomateLab-tech/content-distribution (MCP server)
Compatibility: Not stated.
Use when the user wants to publish a post, article, or announcement to multiple platforms at once , DEV.to, Hashnode, GitHub Discussions, Reddit, Bluesky, LinkedIn, Medium, or Twitter/X.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:21 prepareio.github.Automattic/simplenote-mcp (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server that gives any MCP-compatible AI tool access to your [Simplenote](https://simplenote.com/) data , read by default, with opt-in write tools (create, update, trash, restore, revert) when you run `simplenote-mcp setup` with write mode enabled.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
cli/src/http.ts:48 res = await fetch(url, {io.github.AvivK5498/agenthook (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
