- Yapitalism @aytuncyildizli/yapitalismDrive terminal coding agents by voice, with receipts that never claim more than they proved.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Bastion @gowthaman90/mcp-bastionReliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- MCP-Bastion @vaquarkhan/mcp-bastionSecurity middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Mneme @patsa2561-art/mneme-aiMemory layer for AI coding assistants. Indexes git history + code, exposes via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- AccInt @maxbaluev/accintLocal Work Model MCP server for agent work that learns from real outcomes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
- Agent Discover @keshrath/agent-discoverFind, install and enable MCP servers mid-session on any host, with consent and tool pinning6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- Cogmemai @hifriendbot/cogmemaiMemory for any Ai: remembers across sessions, enforces your rules before actions, reviews the work.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- SafeAgent @azender1/safeagentExactly-once execution guard for AI agents. Prevents duplicate payments and webhooks on retry.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Marrow AI: Control Layer for AI Agents @getmarrow-ai/marrowA named yes before your AI agent acts, plus proof the next agent can reuse. Works in any MCP client.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Assurance @i-ops-hq/assurance-mcpChecks what an agent did NOT read. Coverage over a retrieval step or a folder.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- Onchain Agent Wallets @nirholas/onchain-agent-walletsGive an AI agent a Solana spending allowance instead of your key. Chain-enforced cap, x402.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Quilt @wkoverfield/quiltTrack which AI agent wrote which lines in a shared Git checkout; each commits only its own lines.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Telleroutlook MCP @telleroutlook/mcp-serverWasmAgent MCP server — WASM-sandboxed code execution with capability manifests and Tasks API.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Tuning Engines - Governed AI Runtime @cerebrixos-org/tuning-enginesGovern model, agent, skill, and MCP workflows with policy, approvals, traces, and usage analytics.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Hermes Action Bridge @thebluehouse75/hermes-action-bridgeDelegate real-world actions from Claude Code, Codex, and other agents to Hermes Agent.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- ToolMesh @dunkelcloud/toolmeshSelf-hosted MCP gateway. Turn any REST API into MCP tools via YAML (DADL). Authz, audit, policies.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.6 GitHub stars.
- Poordjaevin @icaro0310/poordjaevinTyped answers with calibrated confidence for agents. Local-first, no API key.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
- mcpwall @behrensd/mcpwalliptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- cmdxray @aurelio-nakamura/cmdxrayOffline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Kepil @oleg-vdv/kepilPassport, mandate, fail-closed action gate and tamper-evident journal for AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
- Fagan @motock/faganAutonomous coding pipeline: frontier models plan and review, a local model implements, gated by TDD.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.5 GitHub stars.
- Agent Wormhole @runningoffcode/wormhole-x402Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Pkgdiet @om-tajne/pkgdietPut your node_modules on a diet - find unused dependencies, analyze health, and reduce size4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Warmplane @warmplane/warmplaneLocal MCP control plane for persistent sessions and compact capability discovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.5 GitHub stars.
