- Kagan @kagan-sh/kaganAI-powered Kanban TUI for autonomous development workflows with agent orchestration5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.12 GitHub stars.
- Assay MCP Server @rul1an/assay-mcp-serverPolicy-enforcing MCP proxy with portable evidence output.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.12 GitHub stars.
- SatGate – Economic Firewall for AI Agents @satgate-io/satgateBudget, payment and audit controls for AI agent API calls and MCP tool calls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.11 GitHub stars.
- Scopeblind @tomjwxf/scopeblind-mcpScan, protect, and monitor APIs from AI coding tools. Device-level rate limiting.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Lingua Universale MCP Server @rafapra3008/lu-mcp-serverVerify AI agent communication with session types and formal proofs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Agenticorg @mishrasanjeev/agenticorgRepository MCP adapter for company-scoped workflow candidates and conditional API discovery.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Trentina @crunchtools/trentinaSecure MCP gateway and quarantine for AI agent traffic — three-layer prompt injection defense5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Glassbox Framework @thebarmaeffect/glassbox-frameworkRuntime constitutional verification for AI answers — claim reasoning, ECS, red team, audits.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Mcacp @oortonaut/mcacpMCP-to-ACP bridge — let any MCP client drive ACP coding agents6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Aperion Shield @aperionai/shieldLocal guardrail proxy that blocks destructive MCP tool calls, rug pulls, and tool poisoning5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- SchemaBrain @arun-kc/schemabrainThe trust and intelligence layer between AI agents and your database.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Writbase @writbase/writbaseMCP-native task management for AI agent fleets with scoped permissions and provenance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- SentinelX MCP @sentinelx/sentinelxOperate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.11 GitHub stars.
- Agent Mail Gateway @dominikamann/agent-mail-gatewaySelf-hosted email for AI agents: own IMAP/SMTP mailbox per key, allow lists, calendar invites.Not assessed yet.Runs on your machine, installed from Docker.10 GitHub stars.
- x402check @caiovicentino/x402checkRisk-check counterparties before an AI agent pays; pay x402 resources only after a verified allow5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Orchestrator @crak1644/orchestrator-mcpLet one coding-agent CLI consult another: Codex, Claude Code, OpenCode, Copilot or Antigravity.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Klarion @0x1adi/klarionSecret scanning for AI agents: rules and entropy find candidates, a model decides which are real.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.10 GitHub stars.
- Lockstep @lockstep-team-agent/lockstepDecision memory for AI coding agents: captures decisions once, briefs every agent before it acts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- GigaMail @adecubed/gigamailYour real mailbox and calendar for your agent (M365/IMAP); a human approves every send.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- OCM @sandeepbazar/ocm-mcp-serverGuardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Agent Relay @mmmikael/arelayEnd-to-end encrypted inbox where AI agents deliver files and request human approval.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- ControlKeel @aryaminus/controlkeelGoverned MCP workflows with policy validation, findings tracking, and review gates.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Sanctuary @sanctuaryprotocol/sanctuaryOpen-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Obsidian Turbocharged @the-40-thieves/obsidian-tcGoverned Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
