- nomArmy @rayson-tech/nomarmySandboxed coding workers, verified: tests rerun fresh and must fail with the change reverted.Not assessed yet.Runs on your machine, installed from npm.4 GitHub stars.
- Agent Passport System — Cryptographic Identity for AI Agents @agent-passport-system/agent-passport-mcpCryptographic identity, delegation, governance, and commerce for AI agents. 152 tools.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.4 GitHub stars.
- Amber Electric MCP by UnClick @malamutemayhem/amberReal-time Australian electricity spot prices and renewables data from Amber Electric. By UnClick.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Tirith @eabz/tirithCoordination server for parallel coding agents: claims, contracts, notices, and memory notes.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.4 GitHub stars.
- ABN Lookup MCP by UnClick @malamutemayhem/abnAustralian Business Number lookup and business name search. By UnClick.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Jules Dispatch @yuuqq/jules-dispatchBatch-dispatch coding tasks to Google Jules: 50 parallel sessions, plan approval, PR collection.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- YAAC @amyodov/yet-another-agentic-chatMessaging between concurrent AI coding sessions, across clients, over MCP. Zero infrastructure.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Lossless Context @northtekdevs/lossless-context-mcpAgent context flight recorder: restore after compaction, fan-out packs, signed git-bound receipts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Cursor Delegate @andreilungeanu/cursor-delegate-mcpBridge AI coding hosts to cursor-agent over the Agent Client Protocol.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- A202 @a202-protocol/a202-mcpVerifiable agreements for agent-led commerce: mandates, obligations, evidence, transaction records.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
- Kolonie AI @kolonie/kolonieA colony of AI citizens: join with no credential, prove skills, earn, vote on the rules.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
- On Board @swisspra/on-boardCross-platform shared memory and ticket coordination for AI agents across MCP clients.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Manifold @nonchan7720/manifoldMCP gateway aggregating MCP servers and OpenAPI/Swagger REST APIs behind one MCP endpoint5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
- SassyMCP @sassyconsultingllc/sassymcpOne MCP server that replaces 75+ — 278 tools in a single exe, smart-loaded.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Cosmergon @rkocosmergon/cosmergonLiving economy for AI agents — Conway physics, energy currency, marketplace, reputation.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Tunnel @zachlikefolio/tunnel-mcpDirect end-to-end-encrypted tunnel between Claude agents — two-party or a room of up to 16.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Plumb @plumbkit/plumbLSP-backed IDE intelligence plus concurrency-safe, transactional edits for AI coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.4 GitHub stars.
- Rebar @navapbc/rebarEvent-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Relay @mhcoen/mcp-relayMCP relay server for Claude Desktop <-> Claude Code communication6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Agence @l-agence/agenceAI governance MCP server — policy enforcement, skills, memory, multi-LLM consensus6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Veto @jigyasudham/veto93 agentic MCP tools + 49 specialist agents for every major AI CLI. Self-learning, no API keys.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Nexus @j7an/nexus-mcpDelegate tasks to coding agents (Claude, Codex, Antigravity) from any MCP client9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Aegis Protocol @im-sham/aegis-protocolTrustless escrow for AI agent-to-agent transactions on Base L2 with ERC-8004 identity and USDC.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Agirails @unima3x/agirails-mcp-serverPayment rails for AI agents — escrow, settlement, discovery, and disputes from any context window.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
