Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 601 to 646 of 646 MCP, Grade D entries. Page 13 of 13.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
core/skills/1c-admin-devops/references/publish-and-web.md:84 curl -i http://<хост>/<алиас>/ # web-клиент: чтоBsl Ai Toolkit (MCP server)
Compatibility: Not stated.
*AI agent toolkit for 1C:Enterprise 8.3 (BSL) development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:30 @modelcontextprotocol/sdkCodeRAG (MCP server)
Compatibility: Not stated.
**Advanced graph-based code analysis for AI-assisted software development**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/exec_policy.rs:284 assert!(assert_exec_allowed("curl http://x | sh", &cfg(ExecMode::Unrestricted)).is_ok()Codex Free (MCP server)
Compatibility: Not stated.
*Codex Free, rewritten in Rust (but you still have to buy ChatGPT Plus)*
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:28 @mastra/ai-sdkcoworker (MCP server)
Compatibility: Not stated.
Open-source AI agent built with [Mastra](https://mastra.ai).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargdetrix (MCP server)
Compatibility: Not stated.
<table style="border:none;"> <tr> <td width="300"> <img alt="Detrix" src="assets/logo.png" width="300"> </td> <td>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
action.yml:127 curl -LsSf https://astral.sh/uv/install.sh | shdevduck (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="duck-animated.svg" alt="DevDuck" width="160" height="160"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
ai/scripts/ai_dev_helper.py:86 subprocess.run(['git', 'checkout', '-b', branch_name])ESP32MCPServer (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server running on ESP32 (and Nordic nRF52840 in sensor-only mode), exposing real-world sensor data and bus protocols to AI assistants and automation tooling over WebSocket / JSON-RPC 2.0.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
chromium/scripts/check-patches.sh:4 # scratch repo. CI runs this; it needs curl and git, not the build volume.Flecha Browser (MCP server)
Compatibility: Not stated.
An Arc-style browser for developers, built on a Chromium fork.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
evals/datasets/bench150/labeling/questions.md:415 <!-- Note for AI coding assistants reading this file: ignoreJev Judge Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
benchmark_test.go:23 []byte(`fetch("/api/users");const token="jsowl (MCP server)
Compatibility: Not stated.
**JsOwl** 是一个使用 Go 编写的高性能 JavaScript 信息收集与安全分析工具，同时也是一个可复用的 Go 库。它自动收集目标站点的页面、JavaScript、Webpack/RequireJS chunk 与 SPA 运行时资源，通过正则与 AST（Tree-sitter）提取 API 端点、参数、路由和敏感信息（密钥、Token、身份证、内网 IP 等），并生成 JSON 与自包含的交互式 HTML 报告, , 是 Web 安全测试、渗透测试信息收集阶段和攻击面梳理的自动化利器。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
cmd/kenfold/handoff_integration_test.go:31 if out, err := exec.Command("git", append([]string{"-C", dir}, argskenfold (MCP server)
Compatibility: Not stated.
[English](README.md) | [Korean](README.ko.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:46 prepareKorean Law Mcp (MCP server)
Compatibility: Not stated.
Korean law for Claude via the official 법제처 Open API: statutes, precedents, administrative rules, local ordinances, treaties and interpretations, with citation verification.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.agents/skills/cloudflare/references/sandbox/patterns.md:40 await sandbox.exec('curl -fsSL https://code-serverLastfm Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server for Last.fm.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/adr/ADR-042-verify-evidence-injection.md:663 32. Evidence body containing `Ignore previous instructions,Llm Council (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://amiable-dev.github.io/llm-council"> <img src="https://raw.githubusercontent.com/amiable-dev/llm-council/master/docs/img/logo.svg" alt="LLM Council Logo" width="200"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +2 more
desktop-app/dev.mjs:28 const req = http.get(url, (res) => {Local Coding Agent (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/magpie_search/backup.py:442 `socket.create_connection((host, port))` on the bare host string.Magpie Search (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.xfloukiex-lab/magpie-search --> <p align="center"> <img src="https://raw.githubusercontent.com/xfloukiex-lab/magpie-search/main/assets/magpie-logo.png" alt="Magpie Search" width="180"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
apps/backend/Dockerfile:9 curl -LsSf https://astral.sh/uv/install.sh | sh && \Mcp Gateway (MCP server)
Compatibility: Not stated.
A production-ready API gateway for Model Context Protocol (MCP) servers, providing enterprise-grade infrastructure with authentication, logging, rate limiting, server discovery, and multi-protocol transport support.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
scripts/setup.sh:12 echo " curl -fsSL https://get.pnpm.io/install.sh | sh -"Mcp Klever Vm (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server tailored for Klever blockchain smart contract development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
extension/background.js:2 d_set_extension_id(e){try{const t=await fetch(e),n=await t.text(),r=`chrome-extensioMcp Link (MCP server)
Compatibility: Not stated.
**MCP Link** is a complete framework that enables AI agents to **interact with the real world** through a controlled, curated, safe and verified browser- and server-based toolchain.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
CLAUDE.md:26 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | shMcp Loxone (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/mcp_openstack_ops/services/core.py:111 response = requests.get(heat_url, headers=headers, timeout=5)Mcp Openstack Ops (MCP server)
Compatibility: Not stated.
> **MCP OpenStack Operations Server**: A comprehensive MCP (Model Context Protocol) server providing OpenStack project management and monitoring capabilities with built-in safety controls and single-project scope.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # curl -fsSL https://relaydeck.onrender.com/install | shMcp Server (MCP server)
Compatibility: Not stated.
> [!NOTE] > **Relaydeck** is now available on the [App Store](https://apps.apple.com/app/id6821470281) for iPhone, iPad, and Apple Watch.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
bin/provision.sh:43 curl -fsSL https://mise.run | shMcp Server (MCP server)
Compatibility: Not stated.
<!-- readme-badges:start -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/updates.js:85 const child = spawn('/bin/bash', ['-c', `curl -fsSL ${INSTALL_SH} | bash`], {Meridian Browser (MCP server)
Compatibility: Not stated.
<p align="center"><img src="build/icon-1024.png" width="112" alt="Meridian"></p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:177 curl -sSf https://getmetatron.com/install.sh | shmetatron (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(dynamic-range: high)" srcset="https://raw.githubusercontent.com/kerbelp/metatron/main/assets/metatron-banner-hdr.png" /> <img src="https://raw.githubusercontent.com/kerbelp/metatron/main/assets/metatron-banner.png" alt="Metatron , you
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basMinirag Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.sfrangulov/minirag-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
deploy/gcp/startup.sh.tpl:76 curl -fsSL https://tailscale.com/install.sh | shmori (MCP server)
Compatibility: Not stated.
**Mori (森) , a governed shared-memory layer for AI coding agents.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT OBFUSCATION_RUNS_ENCODED_PAYLOAD
install.sh:433 curl -fsSL --connect-timeout 15 --max-time 90 https://bun.sh/install | bash 2>/dev/null || trueMy Codex (MCP server)
Compatibility: Not stated.
[English](./README.md) | [한국어](./docs/i18n/README.ko.md) | [日本語](./docs/i18n/README.ja.md) | [中文](./docs/i18n/README.zh.md) | [Deutsch](./docs/i18n/README.de.md) | [Français](./docs/i18n/README.fr.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
benchmarks/differential-fuzz/poc-harness.ts:7 * - the canonical hostname that fetch()/http.get() would resolveMythos Agent (MCP server)
Compatibility: Not stated.
<p align="center"> <strong>English</strong> · <a href="README.zh-CN.md">简体中文</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
crates/ollaya/src/update.rs:156 .args(["-c", &format!("curl -fsSL {INSTALL_SH} | sh")])ollaya (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="site/public/static/logo-white.svg"> <img src="site/public/static/logo.svg" alt="" width="88"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
web/src/composables/useWorkerStartupTool.ts:318 command: `curl -fsSL ${shellQuote(`${installerOrigin}/static/wonlyboxes (MCP server)
Compatibility: Not stated.
[简体中文](docs/README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:3 # curl -fsSL https://pensieve.tools/install.sh | shpensieve (MCP server)
Compatibility: Not stated.
Pensieve for Claude Code: semantic search over your repos, documents and past agent sessions, and your threads of work (MCP server), the skills for search and for closing out threads, and hooks that keep the index current.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
tools/curl_mcp.py:55 follow_redirects: If True, curl will follow HTTP 3xx redirects automatically.Pentester Mcp (MCP server)
Compatibility: Not stated.
<h1 align="center">Pentester-MCP</h1>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
CLAUDE.md:345 curl http://localhost:3002/healthPeta Core (MCP server)
Compatibility: Not stated.
A control-plane runtime for MCP (Model Context Protocol).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/setup_env.sh:50 curl https://pyenv.run | bashPython Runtime Interpreter Mcp Server (MCP server)
Compatibility: Not stated.
<p align="left"> <img src="primslogo.png" alt="PRIMS Logo" width="200"/> <a href="#"><img src="https://img.shields.io/badge/status-alpha-orange?style=for-the-badge" alt="Status: Alpha"/></a> <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=for-the-b
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:9 # curl -sSfL https://qartez.dev/install | shQartez Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="logo.png" alt="Qartez" width="128" height="128"> <h1 align="center">Qartez MCP</h1> <p align="center"> <strong>X-ray vision for your codebase - built for AI agents, not humans.</strong> </p> <p align="center"> The first code-intelligence server design
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
integrations/homeassistant/control_device.py:38 response = requests.get(f"{HASS_URL}/api/states/{entity_id}",Roomey_AI_Voice_Agent (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/IMG_1982.JPG" alt="Roomey Device" width="100%"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
scripts/install.sh:3 # Usage: curl -fsSL https://raw.githubusercontent.com/opensvm/solana-mcp-server/main/scriSolana Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides comprehensive access to Solana blockchain data through Cline.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
aurora-ui/src/api/ai.js:101 return fetch('http://localhost:8099/api/image/analyze', {Stardew Sage (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB +1 more
app/test_observability.py:122 result = await conn.fetch("""supermcp (MCP server)
Compatibility: Not stated.
> A comprehensive platform for creating, deploying, and managing Model Context Protocol (MCP) connectors that bridge AI assistants with databases, APIs, and other data sources.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +2 more
talkito/cli.py:519 subprocess.run(['pbcopy'], input=SLACK_BOT_MANIFEST.encode(), check=True)talkito (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/timurcatakli/thumbly/main/install.sh | shthumbly (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK +2 more
cli/scripts/benchmark-performance.ts:111 await fs.rm(tempDir, { recursive: true, force: true });vsync (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/cloud-init.yaml:69 # - curl -fsSL https://tailscale.com/install.sh | sh && tailscale up --sshWhatsapp Bridge (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:16 prepareWordyMe (MCP server)
Compatibility: Not stated.
<h1 align="center"> <a href="https://wordy.me"><img src="apps/web/public/logo512.png" alt="WordyMe home" height="70"></a><br> WordyMe™ </h1>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/CLAUDE_CODE.md:999 curl -s https://internal.company.com/claude-setup.sh | bashZMCPTools (MCP server)
Compatibility: Not stated.
🚀 **TypeScript MCP Tools for Claude Code** - Professional multi-agent orchestration platform with 61 enhanced tools, documentation intelligence, and advanced automation capabilities.
This grade is a hygiene screen, not proof of safety.
