- RugSnare @paraphern/rugsnarePin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- MateMCP @vrassouli/matemcpYour agent hit a limit? Keep working. MateMCP securely connects AI chats to your computer via MCP.Not assessed yet.Runs on your machine, installed from a package registry.3 GitHub stars.
- Diavlos @harisnopen/diavlosSigned messages between AI agents. Dangerous actions wait for a human-signed approval.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.3 GitHub stars.
- MCPower Security Proxy @mcpower-security/mcpower-proxySecurity proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Decidealot @psyb0t/decidealotLocal Laya and Von typed decisions over TypeSafe-compatible MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
- CoS Codex Bridge @av-labs-co/cos-codex-bridgeOperate Codex projects and tasks from a Chief of Staff with scoped access and durable receipts.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Jev @aitejiu/jevJev judgments for agents: injection scanning, shell risk gating, ranking7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- prompt-protection @mughalhere/prompt-protectionScan prompts, tool definitions and model output for injection, and guard agent tool calls.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- my-pi @boxboxmari/my-piLocal-first MCP runtime for coding agents with safe workspace access, AST/LSP navigation, and Git.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- ClickHouse @dockndevai/mcp-clickhouseClickHouse query & management for AI agents — SQL-classified read/write/destructive gating.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Conarium @dogrucanemek-alt/conariumGoverned database access for AI assistants: masking, signed receipts, coverage reconciliation.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Firekeep @kapella-hub/firekeepSelf-hosted operating layer for AI agents: knowledge, continuity, coordination, and governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- PostgreSQL (hardened, read-only) @eszetael/postgres-mcp-hardenedRead-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Seatbelt @kryptosai/mcp-seatbeltMCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Lotor @githubscum/lotorA local receipt and approval gate for AI agent sessions. The agent can act, but it cannot sign.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- OpenAdapt Agent (openadapt-flow bridge) @openadaptai/openadapt-agentLocal Beta bridge for governed openadapt-flow workflows and attended actions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- SafeInstall @mickdownunder/safeinstallLocal-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Pathmodeio MCP @pathmodeio/mcp-serverDeterministic intent preflight before your agent builds: six gates, keyless, no model call.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- signet-eval @jmcentire/signet-evalDeterministic policy enforcement and MCP management for AI agent tool calls.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.3 GitHub stars.
- mcpm @getmcpm/cliMCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Aegis @cleburn/aegis-mcpRuntime governance enforcement for AI agents. Zero token overhead.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Sigil @cdrn/sigilLocal keystore + MCP server. Claude can sign EVM transactions but never sees the private key.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Calllint @calllint/calllintStatic preflight safety gate for MCP servers — scan configs before you run them. Never executes.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Air Blackbox @airblackbox/air-blackbox-mcpEU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
