Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 401 to 450 of 1,860 MCP, Grade C entries. Page 9 of 38.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/verify-provenance.mjs:59 const res = await fetch(url, {io.github.SPAZIO-GENESI/attest-mcp (MCP server)
Compatibility: Not stated.
Listed on the [official MCP Registry](https://registry.modelcontextprotocol.io/) as `io.github.SPAZIO-GENESI/attest-mcp`.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:9 postinstallio.github.UnityNodes/canton-ccpedia (MCP server)
Compatibility: Not stated.
**The Canton Network knowledge platform.** Open source, no auth, one MCP endpoint.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/quarry/local.py:515 with urllib.request.urlopen(io.github.Wangggym/quarry (MCP server)
Compatibility: Not stated.
> **The database workbench built for the AI era** , one kernel, many faces (CLI / GUI / MCP / agent skill).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
deck/rendering/thumbnail.py:142 result = subprocess.run(io.github.Whatsonyourmind/modelforge (MCP server)
Compatibility: Not stated.
Public repository whatsonyourmind/modelforge.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
packages/mcp/src/index.ts:119 await fetch(`${BASE_URL}/api/telemetry/mcp-install`, {io.github.World-999-Labs/proof-layer (MCP server)
Compatibility: Not stated.
**Cryptographic governance receipts for AI agents.** Issued *before* the agent acts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:20 prepareio.github.Writbase/writbase (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:15 prepareio.github.XCP/mcp-server (MCP server)
Compatibility: Not stated.
Give AI agents the ability to interact with [Counterparty](https://counterparty.io) , the token protocol built on Bitcoin.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/services/bundlephobia.ts:24 const response = await fetch(url, {io.github.YashviGupta15/npm-advisor-mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that acts as an intelligent npm package advisor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/verify-tarball.mjs:25 /(^|\/)\.npmrc$/i,io.github.Yummybait-fin/uniswap-tx-builder-mcp (MCP server)
Compatibility: Not stated.
Skill for driving the uniswap-tx-builder MCP: build unsigned Uniswap v3 liquidity-position transactions (collect, close/burn, mint, increase, plan), simulate them, and sign with your own wallet.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
.planning/milestones/v2-phases/phase-15/15-01-PLAN.md:158 Use `vi.stubGlobal('fetch', ...)` pattern from clienio.github.Yuuqq/jules-dispatch (MCP server)
Compatibility: Not stated.
> **Batch-dispatch tasks to [Google Jules](https://jules.google.com/) in parallel , and use it as an MCP tool inside [Claude Code](https://docs.anthropic.com/en/docs/claude-code) or [OpenAI Codex CLI](https://github.com/openai/codex).**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
examples/02-openai-migration/index.ts:5 * 1. Raw fetch (same payload shape as OpenAI)io.github.Z333Q/p402 (MCP server)
Compatibility: Not stated.
**AI payment router.** Route across 300+ models, settle per request in USDC on Base or USDC.e on Tempo.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/test-packed-install.mjs:86 await fs.rm(tarballPath, { force: true });io.github.Zk-nd3r/zcash-mcp (MCP server)
Compatibility: Not stated.
ZAP1 receipts for Zcash agents: verify workflows without trusting the server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:24 prepareiwork_mcp (MCP server)
Compatibility: Not stated.
Create and edit Numbers, Pages, and Keynote documents through MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/secrets.ts:167 resp = await fetch(url, {JanuScope (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./januscope.png" alt="JanuScope logo" width="500" height="500" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/jdatamunch_mcp/storage/data_store.py:521 shutil.rmtree(dir_)Jdatamunch Mcp (MCP server)
Compatibility: Not stated.
Token-efficient MCP server for tabular data retrieval via CSV/Excel/Parquet/JSONL indexing
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:21 prepareJj Mcp Server (MCP server)
Compatibility: Not stated.
`jj-mcp-server` is a Model Context Protocol (MCP) server that exposes Jujutsu (`jj`) version-control operations as programmable tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
packages/jmri-mcp/codex/jmri_mcpctl.py:96 return subprocess.run(JMRI MCP (MCP server)
Compatibility: Not stated.
*[Version française](README.fr.md)*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:13 prepareJobkeepr (MCP server)
Compatibility: Not stated.
Connect [Jobkeepr](https://jobkeepr.com) to Claude, ChatGPT, or any other MCP client, so an AI assistant can read and manage your field service business: jobs, customers, scheduling, estimates, invoices and payments.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:56 prepareJobScout MCP (MCP server)
Compatibility: Not stated.
A privacy-first, bring-your-own-connections MCP server for multi-source job discovery.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:12 prepareJuliadoc Mcp (MCP server)
Compatibility: Not stated.
An MCP server that efficiently serves context to Claude Desktop about Julia documentation and source code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/build_plugin_demo.py:131 subprocess.run(Juno Open Health Tools (MCP server)
Compatibility: Not stated.
Free, privacy-conscious tools for turning messy symptom notes into a clearer appointment conversation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
examples/cli/conftest.py:54 if requests.get(readiness_url, timeout=5).status_code == 200:Jupyter Mcp Server (MCP server)
Compatibility: Not stated.
🪐 🔧 Model Context Protocol (MCP) Server for Jupyter.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:31 prepareJustCall MCP Server (MCP server)
Compatibility: Not stated.
The JustCall [Model Context Protocol (MCP)](https://modelcontextprotocol.com/) Server lets Large Language Models (LLMs) and AI agents make real-world voice calls and send SMS directly through JustCall’s APIs , securely, contextually, and programmatically.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/main.py:146 process = subprocess.run(K8gentS Kubernetes RCA MCP Server (MCP server)
Compatibility: Not stated.
**A Human-in-the-Loop RCA Agent for Kubernetes , LLM Diagnosis, OPA-Bounded Remediation**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:21 prepareKaseya Quote Manager (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that gives AI assistants **read-only** access to [Kaseya Quote Manager](https://help.quotemanager.kaseya.com/) (Datto Commerce) , quotes, sales orders, purchasing, the product catalog, and customers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:36 @clerk/nextjsKernel Mcp Server (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that provides AI assistants with secure access to [Kernel platform](https://onkernel.com) tools and browser automation capabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
benchmarks/agent-e2e/arms.go:245 command := exec.Command(cfg.Agent, arguments...)Kivgraph (MCP server)
Compatibility: Not stated.
> [!NOTE] > **Kivgraph began as a research project.** It explored whether a local semantic > code graph could reduce the amount of context coding agents need to inspect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
tutorial/17_multiphase_training.py:30 wget https://cs231n.stanford.edu/tiny-imagenet-200.zipKrauncher analyzer (MCP server)
Compatibility: Not stated.
**Run your training script on a remote GPU.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:18 prepareKudosity (MCP server)
Compatibility: Not stated.
An installable [Model Context Protocol](https://modelcontextprotocol.io) server that gives AI agents native tools to send **SMS, MMS and WhatsApp** messages, manage contacts and webhooks, and research the Kudosity API , powered by [Kudosity](https://kudosity.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
lachesis/cache.py:183 shutil.rmtree(self.directory)Lachesis (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.UnboundCompute/lachesis -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
SKILL.md:90 cat > ~/.config/latticenet/credentials.json <<'EOF'LatticeNet (MCP server)
Compatibility: Not stated.
Publish articles and notes under your own byline, to a readership of other AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
lbrain_agents/installer.py:105 shutil.rmtree(target)LBrain (MCP server)
Compatibility: Not stated.
Local-first agent memory.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:21 prepareLeetcode Mcp Server (MCP server)
Compatibility: Not stated.
The LeetCode MCP Server is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server that provides seamless integration with LeetCode APIs, enabling advanced automation and intelligent interaction with LeetCode's programming problems, contests, solutio
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/golden_diff.py:83 completed = subprocess.run(Lex Temporal Luxembourg and EU Law (MCP server)
Compatibility: Not stated.
**Point-in-time retrieval of regulatory text.** Regulators publish the current rule; every audit, investigation and dispute is about a **past date**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:14 prepareLinear Mcp Server (MCP server)
Compatibility: Not stated.
A server that integrates Linear's project management system with the Model Context Protocol (MCP) to allow LLMs to interact with Linear.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:11 prepareLiveblocks Mcp Server (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://liveblocks.io#gh-light-mode-only"> <img src="https://raw.githubusercontent.com/liveblocks/liveblocks/main/.github/assets/header-light.svg" alt="Liveblocks" /> </a> <a href="https://liveblocks.io#gh-dark-mode-only"> <img src="https://raw.githubu
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:35 prepareLocal Competitor Map (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
scripts/record-coverage-evidence.mjs:374 fs.rmSync(localPath(cwd, name), { force: true, recursive: true });Local Skills Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
cmd/client/main.go:56 cmd := exec.Command("go", "run", "./cmd/server/main.go")Loki Mcp (MCP server)
Compatibility: Not stated.
A Go-based server implementation for the Model Context Protocol (MCP) with Grafana Loki integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
longhand/demo/runner.py:180 shutil.rmtree(demo_root, ignore_errors=True)Longhand (MCP server)
Compatibility: Not stated.
Persistent local memory for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
google-ads/server/src/main/java/com/loomascale/googleads/mcp/service/GoogleAssetMediaService.java:110 FetchedCLoomaScale Ads (MCP server)
Compatibility: Not stated.
Self-hostable MCP servers that let ChatGPT or Claude run real ad accounts , with spend guardrails they cannot talk their way past.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:18 prepareLuma Mcp (MCP server)
Compatibility: Not stated.
多模型视觉理解 MCP 服务器，为不支持原生视觉能力的 AI 助手提供统一的图片分析能力。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:37 prepareLunchmoney Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server implementation for [LunchMoney](https://lunchmoney.app/), providing programmatic access to personal finance management through LunchMoney's API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:52 prepareLuxalgo Mcp Server (MCP server)
Compatibility: Not stated.
<img alt="LuxAlgo MCP" src=".github/assets/banner.svg" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
lyricpatch_agent/coinbase.py:107 result = subprocess.run(LyricPatch (MCP server)
Compatibility: Not stated.
Change short lyrics in an existing song: upload authorized audio, select a phrase, write replacement words, preview the new version, and download the finished song.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
index.js:62 const response = await fetch(this.baseUrl + path, {M2M Sentinel (MCP server)
Compatibility: Not stated.
Deterministic EVM bytecode capability observations, EIP-1967 proxy resolution, current gas-price telemetry, and sourced market observations for autonomous applications on Base (Chain ID 8453).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:44 id_rsamabl (MCP server)
Compatibility: Not stated.
The mabl [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server lets AI assistants and agents work directly with your mabl tests , run tests, analyze failures, create tests in the cloud, and query results across your workspaces.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
plugin/bin/che-ical-mcp-wrapper.sh:57 URL=$(curl -sL --max-time 30 "$API_URL" 2>/dev/null \macOS Calendar and Reminders (MCP server)
Compatibility: Not stated.
**Give Claude native control of macOS Calendar and Reminders.** A Swift MCP server built directly on EventKit , 29 tools for events, reminders, tags, batch operations, conflict detection, and undo/redo.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
runtime/mac_helper.py:166 result = subprocess.run(Macos Computer Use Skill (MCP server)
Compatibility: Not stated.
<p align="right"> <a href="./README.zh-CN.md">简体中文</a> · <a href="./README.ja.md">日本語</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/smoke-compile.mjs:71 const res = await fetch(`${base}/latest.pdf`);MagicTeX (MCP server)
Compatibility: Not stated.
MagicTeX , a LaTeX editor for AI agents: live PDF preview, PDF comments that drive edits, a Visual (WYSIWYG) mode, and git-tracked history, with slash commands to run it hands-off.
This grade is a hygiene screen, not proof of safety.
