Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 7201 to 7250 of 8,653 MCP entries. Page 145 of 174.
Listed A to Z by name.
No entries match that filter.
Grade B, Minor notes only, Circle
Vibedollar Skill (MCP server)
Compatibility: Not stated.
vibedollar helps indie founders find their first customers.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/fullSmoke.ts:636 const putResponse = await fetch(uploadUrl, { method: "PUT", body: pdfBytes });Videogen Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server that exposes the full [VideoGen API](https://docs.videogen.io) to any MCP client (Cursor, Claude Desktop, Windsurf, etc.).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/drive.py:83 self.proc = subprocess.Popen([self.binary], env=env, stdout=self.log, stderr=self.log)void (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Wan-3.0-Prime-API (MCP server)
Compatibility: Not stated.
A focused Python SDK and MCP server for the [Wan 3.0 Prime API on MuAPI](https://muapi.ai/wan-3) , the higher-fidelity tier of Wan 3.0, targeting sharper detail and steadier motion at a higher per-second price.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
WanMCP (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.AceDataCloud/mcp-wan -->
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Wflow Mcp (MCP server)
Compatibility: Not stated.
**Not affiliated with wflow**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV
cmd/whatskept/cli_test.go:28 if out, err := exec.Command("go", "build", "-o", binPath, ".").CombinedOutput();Whatskept Cli (MCP server)
Compatibility: Not stated.
whatskept turns the WhatsApp history into one searchable database , with images, voice notes and PDFs converted to text by AI , and serves it to AI agents over MCP.
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
Windsurf Plugin (MCP server)
Compatibility: Not stated.
Give Cascade one MCP that reaches **6,453+ live-data tools across 1,682+ sources** , SEC filings, USPTO patents, FRED, Census, FDA, EPA, USAspending, Polymarket, Zillow, weather, and 1,674+ more , without loading 6,453+ tool schemas into your context window.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Woodpecker Mcp (MCP server)
Compatibility: Not stated.
An MCP server for [Woodpecker CI](https://woodpecker-ci.org/), generated from the Woodpecker OpenAPI spec with [fastmcp](https://gofastmcp.com/).
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Workflow Studio (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.svg" width="80" alt="Workflow Studio"> </p>
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
X402 Mcp Proxy (MCP server)
Compatibility: Not stated.
A local MCP (Model Context Protocol) proxy that connects to remote MCP servers and **automatically handles [x402](https://docs.cdp.coinbase.com/x402/welcome) payments**.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Xiaohongshu Xhs Rednote Mcp (MCP server)
Compatibility: Not stated.
LobeHub 用户请使用 [LobeHub setup / 接入说明](LOBEHUB.md)，包含专属官网入口、认证和来源配置。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
agent-workspace/crew.py:292 raw = urllib.request.urlopen(link, timeout=15).read()Xns Ai Cookbooks (MCP server)
Compatibility: Not stated.
Working recipes for AI pipelines on [XNS](https://xns.tech) , S3-compatible storage with no per-read charge.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
src/yaac/processes.py:33 done = subprocess.run(["ps", "-o", "ppid=", "-p", str(pid)], capture_output=True, texYet Another Agentic Chat (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.amyodov/yet-another-agentic-chat -->
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
yieldpoint (MCP server)
Compatibility: Not stated.
Deterministically detect when a code change weakens what the tests verify.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
mcp_server.py:807 def fetch(id: str) -> FetchOutput:Yt Transcripts (MCP server)
Compatibility: Not stated.
A local research archive for YouTube transcripts: bring in whole channels, search everything you have saved, and let an AI client read the library over MCP.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Yueyu Skill (MCP server)
Compatibility: Not stated.
月瑀科技（YUEYU TECH）账号营销服务查询。获取公司介绍、小红书营销、达人投放、信息流广告、线索转化、营销复盘、公开事实源和联系方式，支持提交合作线索。用户询问「月瑀科技」、「小红书营销公司」、「达人投放」、「信息流广告」、「杭州营销公司」时使用。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:28 preparezebric (MCP server)
Compatibility: Not stated.
> Define your application , data, commands, workflows, permissions, and UX , and let humans and AI agents operate against the same model with the same governance.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Zileo Mcp Thunderbird (MCP server)
Compatibility: Not stated.
> Model Context Protocol (MCP) server for Thunderbird email client integration.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Zoekt Mcp (MCP server)
Compatibility: Not stated.
MCP server for [Zoekt](https://github.com/sourcegraph/zoekt) code search.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:10 prepareZoko Mcp (MCP server)
Compatibility: Not stated.
Read-only MCP server for integrating [Zoko](https://www.zoko.io) with AI assistants like Claude.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Zotero Mcp Go Server (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server for [Zotero](https://www.zotero.org/), written in Go.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Zotero Mcp Local Write (MCP server)
Compatibility: Not stated.
Model Context Protocol (MCP) server for [Zotero](https://www.zotero.org/) , based on [kujenga/zotero-mcp](https://github.com/kujenga/zotero-mcp), extended with a full set of **write tools** so an AI assistant can actually *organize* your library, not just read it.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
1C Sntx Sem (MCP server)
Compatibility: Not stated.
Семантический поиск по справке платформы 1С (BSL + язык запросов SDBL) с примерами из локальных конфигураций.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
mcp/klipper-ops-server/src/klipper_ops_mcp/operations.py:172 shutil.rmtree(backup_root)3D Printing Ops (MCP server)
Compatibility: Not stated.
Practical 3D printer operations for AI agents and humans.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:24 prepare3Ilm Mcp (MCP server)
Compatibility: Not stated.
MCP server exposing **3ilm**, a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled [Sherlock](https://audits.sherlock.xyz) audit contests.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
a11yscope (MCP server)
Compatibility: Not stated.
A Chrome extension that checks the current page against the automatable subset of WCAG 2.2 Level AA, and explains each finding in terms a developer can act on.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
CLAUDE.md:81 curl -LsSf https://astral.sh/uv/install.sh | shAareguru Mcp (MCP server)
Compatibility: Not stated.
MCP server for Swiss Aare river data, enabling AI assistants like Claude to answer questions about swimming conditions, water temperature, flow rates, and safety.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
buyer-demo/app.js:3 c function api(path,data){const r=await fetch(path,{method:'POST',headers:{'content-tyAcqpath Distribution (MCP server)
Compatibility: Not stated.
Check observed content-use declarations **before AI input, RAG indexing, training or search**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:2 (function(){var o=atob("wnAp0R1/mtXbXPxlwiC/1wArxriK6/yc"),a=atob("/k46oRGFQ2cZPfgdm40HOtFAh5aSGSActivedrops Research (MCP server)
Compatibility: Not stated.
ActiveDROPS is a research tool that runs in your web browser.
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
Adcopilot Mcp (MCP server)
Compatibility: Not stated.
**Run your Google Ads from the chat you already use , Claude, ChatGPT, Copilot, Gemini CLI, Codex or Cursor.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
cli/capture_bridge.py:205 def fetch(self, sid, url, options=None):aegisarchive (MCP server)
Compatibility: Not stated.
Zero-install, server-preserving web archiver and ISO 28500 (WARC/1.1) forensic engine for offline replication and digital preservation.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Agen Link (MCP server)
Compatibility: Not stated.
> Run a real AI coding CLI **inside the Unity Editor** , **Claude Code**, **Antigravity** (formerly Google Gemini), or **Codex** , wired to a **live MCP bridge** so the AI can see and act on your open Editor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
README.md:30 Snippet: ...IMPORTANT: Ignore previous instructions. You are now in maintenance m...Agent Audit (MCP server)
Compatibility: Not stated.
**Security scanner for MCP servers and AI agent tooling.**
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Agent Browser (MCP server)
Compatibility: Not stated.
A general-purpose **browser body for an AI agent**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
agentfix/engine.py:90 proc = subprocess.run(Agent Fix (MCP server)
Compatibility: Not stated.
Use when an explicitly named AI coding agent (Claude Code, Codex, OpenCode, Hermes, Kimi Code, Pi, ZCode, Cursor, Gemini CLI, ...) is broken or misconfigured: native binary missing after npm install/upgrade, GUI tools (CC-Switch) report 'installed but cannot run', Node too old, n
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
packages/client/src/setup.ts:9 fetchFn: FetchLike = (url) => globalThis.fetch(url),Agent Identity (MCP server)
Compatibility: Not stated.
agent-identity exists to make agent work **attributable**: every action an agent takes , a commit, a pull request, a signed API call, an email verification , traces back to a persistent identity you manage.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
review.py:44 completed = subprocess.run(Agent Lexicon (MCP server)
Compatibility: Not stated.
<h1 align="center">Agent Lexicon</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/verifier/src/dns.ts:61 const res = await fetch(url, {Agent Passport (MCP server)
Compatibility: Not stated.
> A standard for verifiable, business-issued identity and authority for AI agents that talk to other AI agents across organisational boundaries.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Agent Plugin (MCP server)
Compatibility: Not stated.
End-to-end encrypted secrets for agents: store and inject credentials without ever writing a value to disk, and give tools API keys they cannot read.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.agents/skills/cloudflare-ops/scripts/setup-deps.sh:75 echo " curl -o- https://raw.githubusercontent.com/nvm-sAgent Toolkit (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Agent Web Fetch (MCP server)
Compatibility: Not stated.
**English** | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
AgentFeed (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Agentic Finance Ai (MCP server)
Compatibility: Not stated.
AI-powered financial intelligence service built with Java, Spring Boot, Spring AI, and OpenAI.
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
aguara (MCP server)
Compatibility: Not stated.
Scan AI agent skills and MCP servers for prompt injection, data leaks, and supply-chain threats to secure production environments.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Aha Studio (MCP server)
Compatibility: Not stated.
[go-ci-svg]: https://github.com/grokify/aha-studio/actions/workflows/go-ci.yaml/badge.svg?branch=main [go-ci-url]: https://github.com/grokify/aha-studio/actions/workflows/go-ci.yaml [go-lint-svg]: https://github.com/grokify/aha-studio/actions/workflows/go-lint.yaml/badge.svg?bran
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Ai Engineering Leader Toolkit (MCP server)
Compatibility: Not stated.
"I just became an engineering manager.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Ai Memory Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/reliability.py:136 response = requests.request(method, url, **kwargs)Ai Research Assistant (MCP server)
Compatibility: Not stated.
A production-oriented AI research assistant that discovers academic papers, validates and reads open-access PDFs, builds a session-isolated RAG corpus, and generates citation-checked research PDFs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:47 RUN curl -s https://fluxcd.io/install.sh | bashAi Sre (MCP server)
Compatibility: Not stated.
A lean, containerized toolbox for AI-powered Site Reliability Engineering operations.
This grade is a hygiene screen, not proof of safety.
