- Seal @aurumflux20/sealStops agents double-charging across processes: exactly one execution, confirmed by the provider.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- SafeSelect MCP @antonillos/safeselectFail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Sovereign Gateway @mattijsmoens/sovereign-mcp-gatewayGating proxy for MCP servers: policy, verification and one audit trail across upstreams.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Copilot Datagate @afurlane/copilot-datagatePolicy-driven, read-only MCP server for safe database access from AI tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bristlecone Logic @bristlecone2026/bristlecone-logicMicro-settled web content extraction and JSON schema validation utilities for AI agents via XRPL.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Agent Conductor @icohangar-ops/agent-conductorAGENTS.md + skills MCP with CHP R0 gate and adversary decision tools.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Chp @icohangar-ops/chp-mcpSpend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Subagent MCP @thang1710/subagent-mcpLet Codex orchestrate external coding agents through their native harnesses.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- obsify @formative-sum41/obsifyLocal, privacy-preserving PII toolkit over MCP — shape to the model, substance stays local.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Grok Build @nuruvala/grok-build-mcp-serverRun the Grok Build CLI as MCP tools: agent runs with live progress, code review, web research.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Janus @tonylchang/janus-mcpSecure Kubernetes MCP server: scoped, redacted diagnostics and human-approved writes6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Agent Action Gate @aah20/agent-action-gateGate/Prove: deny unattended destructive agent tools. Instant Audit $499 on a2zsoc.com.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- shopify-operations-mcp @jpka/shopify-operations-mcpSafe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Osmcp @krushnavardhanreddy/osmcpA typed, policy-controlled OS capability layer for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- sw-postgres-mcp @jpka/sw-postgres-mcpSafe-write Postgres MCP server with preview-before-execute writes and rollback safety.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Attestify OS @attestifyagent/attestify-mcpMCP stdio server for Attestify OS — governed agent execution and Attestify Trust signed evidence.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Toolgovern @rudrendupaul/toolgovernWraps the toolgovern CLI as a single generic MCP tool for agent-tool policy validation.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- SafeNode MCP Gateway @sp3ak/safenode-mcp-gatewayPolicy proxy for MCP tool calls. A denied call never reaches the downstream server.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Procheiron @logotheusneuro-cpu/procheironReview gate for shared agent memory: an unreviewed or hand-edited memory is never served.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- DeskCert @rudrendupaul/deskcertEvaluates whether an AI agent is safe to operate internal web apps via an MCP run_suite tool.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Kaval @usekaval/kavalVerify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Onepassword Agent @gambadio/onepassword-agent-mcpSave and use 1Password secrets locally without exposing plaintext to AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Arbiter @godwin105/arbiterIs this transaction safe to sign? Decodes what it really does and answers allow, warn or block.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- LineBreak Gate & Spec Bridge @linebreakapp/linebreak-gateApproved acceptance criteria served over MCP to Claude Code, Cursor, or Codex. Git-only, sealed.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
