Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 4801 to 4850 of 8,653 MCP entries. Page 97 of 174.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/simulate-ci.sh:57 print_error "uv is not installed! Install it with: curl -LsSf https://astral.sh/uv/iio.cycloid.mcp/server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides seamless integration with the Cycloid platform, enabling AI assistants to interact with Cycloid's infrastructure management capabilities through natural language.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
examples/agentic-workflow/setup.mjs:44 const response = await fetch(SERVER);io.form/formio-uag (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./examples/images/logo-formio-uag.png" alt="The Form.io Universal Agent Gateway (UAG)" width="40%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:13 8004-solanaio.github.0xSardius/solenrich (MCP server)
Compatibility: Not stated.
Onchain intelligence for Solana agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
channels/base-app/src/App.tsx:113 const response = await fetch(`${API_ORIGIN}/v1/quote?product=${product}`, {io.github.15998194110/delta-witness (MCP server)
Compatibility: Not stated.
> CURRENT OWNER PRICING (2026-09-10): Capture / authenticated Partner Capture / authenticated Partner Preflight / each NEW Watch check = **1 USDC**; Public Preflight = **5 USDC**; Guarded-Action Pilot = **10 USDC**.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/function-worker.mjs:5 // One worker thread per call. The body gets its own event loop, so `await fetch(...io.github.2nd1st/open-mcp-apps (MCP server)
Compatibility: Not stated.
**English** | [简体中文](i18n/README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
third_party/rlm/README.upstream.md:62 curl -LsSf https://astral.sh/uv/install.sh | shio.github.Abhigyan-Shekhar/Waggle-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Abhigyan-Shekhar/Waggle-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
.agents/skills/social0/SKILL.md:232 curl -s https://api.social0.app/v1/accounts \io.github.Abhishek-B-R/social0-mcp (MCP server)
Compatibility: Not stated.
Post to **Instagram, TikTok, YouTube, X, LinkedIn, Facebook, Pinterest, Threads, and Bluesky** from Claude, Cursor, ChatGPT, and other AI apps , in plain English.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:20 # curl -fsSL https://raw.githubusercontent.com/Aboudjem/sniff/main/install.sh | bash -s <platforio.github.Aboudjem/sniff (MCP server)
Compatibility: Not stated.
Autonomous QA scanner via sniff-qa: walks your running app in a real browser and reports real bugs (broken pages/links, console/network errors, broken forms, state-loss, empty/placeholder data, bad loading/error states, responsive + a11y) with reproduction proof, severity, confid
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:20 # curl -fsSL https://raw.githubusercontent.com/Aboudjem/ui-ux-suite/main/install.sh | bash -s <pio.github.Aboudjem/ui-ux-suite (MCP server)
Compatibility: Not stated.
Design audit tool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bench/runner.py:141 with urllib.request.urlopen(io.github.Adeniyikayodee/gagelink (MCP server)
Compatibility: Not stated.
Hydrology data for AI agents, with the reference frames kept attached.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
aggrete/approvals.py:163 httpx.post(url, json={"text": text, "aggrete": req}, timeout=5.0)io.github.Aggrete/aggrete (MCP server)
Compatibility: Not stated.
Set up and operate Aggrete, the open-source MCP policy proxy: write and test coc.yaml rules, wire connectors, deploy over HTTP with OIDC, read the audit log.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/cli/commands/setup.ts:752 execSync('curl -fsSL https://ollama.com/install.sh | sh', { stdio: "inherit" });io.github.AiDimag/aidimag (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
eeg_mcp/monitor.py:543 const r=await fetch("/api/control?t="+TOKEN, {io.github.AImplifier/eeg-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.AImplifier/eeg-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:14 postinstallio.github.Algiras/debugium (MCP server)
Compatibility: Not stated.
Drive live debug sessions for Python, Node.js, TypeScript, C, C++, Rust, Java, Scala, and WebAssembly using the Debugium MCP tools.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:275 curl -fsSL https://raw.githubusercontent.com/Anandb71/arbor/main/scripts/insio.github.Anandb71/arbor (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/arbor-lockup-dark.svg" /> <source media="(prefers-color-scheme: light)" srcset="docs/assets/arbor-lockup-light.svg" /> <img src="docs/assets/arbor-lockup-dark.svg" alt="Arbor" width="300
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
mathlas/server.py:809 "(`curl -sSf https://elan.lean-lang.org/elan-init.sh | sh`) or set "io.github.Archerkattri/mathlas (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/Archerkattri/mathlas/main/assets/banner.png" alt="mathlas" width="680"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
tools/asn_tool.py:39 with socket.create_connection(("whois.cymru.com", 43), timeout=15) as sock:io.github.AynOps/AynOps (MCP server)
Compatibility: Not stated.
<div align="center"> <picture> <img alt="AynOps Logo" src=".github/images/logo.svg" width="90%"> </picture> </div>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
docs/design/infrastructure-design.md:787 curl -fsSL https://ollama.com/install.sh | shio.github.BlackFoil/claude-token-saver-mcp (MCP server)
Compatibility: Not stated.
[English](./README.en.md) | 日本語
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/index.ts:100 console.log("\n curl -fsSL https://ollama.com/install.sh | sh\n");io.github.Cavinooo/claude-find (MCP server)
Compatibility: Not stated.
Pull deep memory from across your Claude Code sessions , when you need it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
benchmarks/mutation_corpus.py:29 "// accuracy decoy: axios.get(req.query.url)\n"io.github.ChesterHsu/flyto-indexer (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>Flyto2 Indexer</h1> <p><strong>Know what breaks.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
eval/cases.go:91 fetch('/api').then(function(r){ return r.json(); }).then(function(j){io.github.ChristopherDavenport/unblink (MCP server)
Compatibility: Not stated.
Pure-Go MCP server that turns any web page into clean, token-budgeted Markdown for AI agents , no Chromium, no V8, no Node.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
shared/embeddings.py:380 with urllib.request.urlopen(req, timeout=_REMOTE_TIMEOUT_S) as resp: # noqa: S310io.github.Cipher208/ariel-memory (MCP server)
Compatibility: Not stated.
> **Your AI agents forget.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
delego/brokers.py:181 with urllib.request.urlopen(req, timeout=self.timeout) as resp:io.github.Delego-Dev/delego (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Delego-Dev/delego -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
experiments/fastcontext/localization_eval.py:104 per-commit fetch (`git init` + `fetch --depth 1 <commit>`) avio.github.Dhevenddra/forensic-deepdive (MCP server)
Compatibility: Not stated.
Persistent code knowledge graph + 9 composite MCP tools (impact, context, archaeology, flow, query, record_insight, recall_insights, visualize, trace) for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
install.sh:29 VERSION=$(curl -s "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name":' | seio.github.DinanathDash/envault (MCP server)
Compatibility: Not stated.
**Envault** is a secure, modern vault application built with Next.js, Supabase, and Tailwind CSS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
crates/calm-core/build.rs:135 .map_err(|e| format!("curl not runnable: {e}"))?;io.github.Eilodon/calm-mcp (MCP server)
Compatibility: Not stated.
**A live, graph-verified map of your codebase , so an AI coding agent can edit with its eyes open instead of grepping in the dark.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
elements/feedback/src/main.js:338 await fetch(this.endpoint, {io.github.EOX-A/EOxElements (MCP server)
Compatibility: Not stated.
A Web Component collection of geospatial UI elements, crafted by EOX.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
prompts/openclaw-setup.md:6 curl -fsSL https://openclaw.ai/install.sh | bashio.github.EthanQC/feishu-user-plugin (MCP server)
Compatibility: Not stated.
All-in-one Feishu MCP server + CLI tool for Claude Code , send messages as yourself, read chats (auto-expanded merge_forward), manage docs / bitable / wiki (full CRUD) / drive / OKR (with progress writes) / calendar (read+write) / Tasks v2 / multi-profile auto-switch / real-time
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
cloud/aurora-community/src/worker.js:54 async fetch(request, env) {io.github.FantasyLab-ai/aurora (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.FantasyLab-ai/aurora --> <div align="center"> <img src="docs/screenshots/aurora-mascot-wizard.png" alt="Aurora" width="200"/>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:38 prepareio.github.Forge-Space/ui-mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://forgespace.co"> <img src="https://brand.forgespace.co/logos/wordmark.svg" alt="Forge Space" height="48"> </a> <h1>@forgespace/ui-mcp</h1> <p>AI-driven UI and backend code generation via Model Context Protocol.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
alembic/versions/0008_organizations.py:17 comme les org_id en chaine libre du chemin self-hosted/curl (qui resio.github.GetHaki/haki (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT OBFUSCATION_RUNS_ENCODED_PAYLOAD
.github/workflows/release.yml:87 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargio.github.GoPlasmatic/orion (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="https://avatars.githubusercontent.com/u/207296579?s=200&v=4" alt="Orion logo" width="120" height="120">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
import_mcpizy.py:21 return json.loads(urllib.request.urlopen(req, timeout=30).read().decode())io.github.H129hj/checkmcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.H129hj/checkmcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargio.github.Hafeok/product-cli (MCP server)
Compatibility: Not stated.
**A CLI and MCP server for the Product Framework , specify software as a verifiable What/How graph.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
x402_server.py:238 res = json.load(urllib.request.urlopen(req, timeout=20))io.github.Hasned-spec/ox402-utils (MCP server)
Compatibility: Not stated.
**94 capability APIs an AI agent can't run in its own sandbox , paid per call via x402 (USDC on Base).** Web research, security recon, **neural text-to-speech (Kokoro-82M)**, speech, document + media conversion, full-page screenshots, SSL/breach audits, SQL sandboxes, embeddings
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
lib/ragstack_common/appsync.py:80 with urllib.request.urlopen(req, timeout=10) as response:io.github.HatmanStack/ragstack (MCP server)
Compatibility: Not stated.
<img align="center" src="ragstack_banner_resized.png" alt="RAGStack-Lambda-app icon">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/ci-public.yml:338 curl -LsSf https://astral.sh/uv/install.sh | shio.github.HewlettPackard/greenlake-audit-logs-mcp (MCP server)
Compatibility: Not stated.
A collection of [Model Context Protocol (MCP)](https://modelcontextprotocol.io) servers that enable AI assistants to interact with HPE GreenLake platform services.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
LOCAL_CI_GUIDE.md:414 curl https://pyenv.run | bashio.github.Indhar01/memograph (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Indhar01/memograph -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
src/mcp/taint.test.ts:72 assert.match(out, /Ignore all previous instructions/);io.github.IvanBBaev/facebook-mcp (MCP server)
Compatibility: Not stated.
Local-first TypeScript MCP server for the Meta Graph API that lets an MCP client publish, read and moderate Facebook Pages through your own Meta developer app, with least-privilege tokens, plan-and-apply write safety and no telemetry.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile-glama:6 RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git &io.github.IvanRublev/keyphrases-mcp (MCP server)
Compatibility: Not stated.
*Empowering LLMs with authentic keyphrase Extraction*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basio.github.J-MaFf/s2-netbox-mcp (MCP server)
Compatibility: Not stated.
A local MCP server that exposes LenelS2 S2 NetBox NBAPI operations , persons/credentials, access levels, portals/readers/outputs, time specs, holidays, portal/reader groups, threat levels, events/activity, and partitions/UDF lists , as MCP tools usable from any MCP-compatible c
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/cli_bridge/lanes.py:699 install_hint="curl -fsSL https://opencode.ai/install | bash",io.github.JoaoBerne/cli-bridge-mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.JoaoBerne/cli-bridge-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/knowledge.ts:448 " curl -L https://raw.githubusercontent.com/matter-labs/foundry-zksync/main/install-foundio.github.Jrigada/foundry-zksync (MCP server)
Compatibility: Not stated.
An MCP (Model Context Protocol) server that exposes [foundry-zksync](https://github.com/matter-labs/foundry-zksync) CLI tools to AI assistants like Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:32 @modelcontextprotocol/sdkio.github.KatoMato65/time-mcp (MCP server)
Compatibility: Not stated.
A simple Model Context Protocol (MCP) server that provides the current date and time.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/setup.mjs:117 else say(" curl -fsSL https://ollama.com/install.sh | sh");io.github.KIOKO-LAB/freshvault (MCP server)
Compatibility: Not stated.
[한국어](./README.ko.md) · [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
index.ts:48 // Same-origin requests / curl / non-browser callers have no Origin headerio.github.KyuRish/mcp-dashboards (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.KyuRish/mcp-dashboards -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
rust/src/doctor.rs:1629 "sin red, o curl no está disponible - no afecta a nada más",io.github.LeandroPG19/cuba-memorys (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.LeandroPG19/memory-industry -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/Lohithry/divlens-mcp/main/install.sh | bashio.github.Lohithry/divlens (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="divlensmainlogo.png" width="120" alt="DivLens Logo" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/rememb/static/app.js:22 const res = await fetch(path, {io.github.LuizEduPP/rememb (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.LuizEduPP/rememb -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
binance-proxy/README.md:26 curl -L https://fly.io/install.sh | shio.github.LuuOW/meridian-skills (MCP server)
Compatibility: Not stated.
**Dynamic task routing via orbital mechanics.
This grade is a hygiene screen, not proof of safety.
