- ToolTrust Scanner @agentsafe-ai/tooltrust-scannerScans MCP servers for prompt injection, data exfiltration, and privilege escalation.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- Iconnect @heznpc/iconnectMCP server for the entire Apple ecosystem — 123 tools across 14 modules. macOS only.Not assessed yet.Runs on your machine, installed from npm.18 GitHub stars.
- mcp-airlock @shalimov04/mcp-airlockGovernance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.18 GitHub stars.
- MetaMCP @mentu-ai/metamcpRoute long-tail MCP servers through three lazy tools and reviewed declarative Methods.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- MCP Hangar @mcp-hangar/hangarPolicy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.18 GitHub stars.
- AirMCP @heznpc/airmcpGoverned MCP runtime for the Apple ecosystem, available on macOS with per-call approval.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Aegis — AI Agent Governance @acacian/aegisPolicy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.18 GitHub stars.
- Lockkeeper @hannay001/lockkeeperRoutes each task to the few skills, MCP servers and tools that fit it.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.17 GitHub stars.
- CALM @eilodon/calm-mcpMCP server giving coding agents a call-graph-aware, hash-verified view of a codebase, not grep.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- Cruxible Core @cruxible-ai/cruxible-coreDeterministic decision engine with receipts. Define rules in YAML, query a graph, get proof.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.17 GitHub stars.
- as a Judge @othervibes/mcp-as-a-judgeMCP as a Judge: a behavioral MCP that strengthens AI coding assistants via explicit LLM evaluations6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.17 GitHub stars.
- ScopeGate @alifanov/scopegatePermission gateway for AI agents: scoped MCP endpoints over 27 services, audited and revocable.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.17 GitHub stars.
- ReasonGate @cgrtml/reasongateProvenance gateway for stdio MCP servers: blocks tool calls fed by untrusted tool results.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- OCM @ocm-mcp-server/ocm-mcp-serverGuardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- Thingctx @thingctx/thingctxDrive devices and APIs from their W3C Thing Description. You gate every operation.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- Lians Agent Memory @ebeirne/liansBitemporal memory for AI agents with point-in-time recall and tamper-evident audit history.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- LLM CLI Gateway @verivus-oss/llm-cli-gatewayOne MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- Phantom Secrets @ashlrai/phantom-secrets-mcpValue-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- Vaara MCP Server @vaaraio/vaara-serverAccountable autonomy MCP server: gating, tamper-evident audit for every action5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
- Strategic Agent Reasoning MCP @putervision/agent-reasoning-mcpStrategic BDI reasoning engine for autonomous AI agents with spatial utility and replanning.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- SysKnife @lacs-project/sysknifeAdministers Linux via typed, approval-gated actions with an Ed25519-signed audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.15 GitHub stars.
- s-gw @sgateway/s-gwKeep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Midas @vornicx/midasLocal-first, source-traceable agent memory — no LLM at ingest, fully offline6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
- Vaara @vaaraio/vaaraAccountable autonomy proxy: gating, tamper-evident audit, time anchor for every action6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
