- Ducklab @jrullan/ducklabMulti-LLM dev harness, MCP-operable: bugs, cycles, gates. Verdicts are exit codes, never opinions.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.9 GitHub stars.
- Occasio @occasiolabs/occasioTamper-evident, Sigstore-signed audit trail for Claude Code agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Iris @iris-eval/mcp-serverStop shipping agents on vibes. Score every agent output for quality, safety, and cost.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Protect @scopeblind/protect-mcpFail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- ibara @mayberrydt/ibaraComputer use for your agents across the Omarchy machines you own. Open source MCP server.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
- agent-custody @svayatta/agent-custodyMCP gateway that checks each agent tool call against a signed grant and policy, and signs a receiptNot assessed yet.Runs on your machine, installed from npm.8 GitHub stars.
- Mizuki @opencovenant/mizukiFixed-price maintenance for public GitHub issues, paid in USDC on Solana.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
- Schemagate @ashishsinha1602/schemagateIdentity-scoped schema selection for text-to-SQL. Returns only the tables the caller may read.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- SPARDA @zakariagharzouli/sparda-mcpAI writes. SPARDA proves. Deterministic, offline security gate for AI edits.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
- ssh-mcp @gelse/ssh-mcpMCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.8 GitHub stars.
- Unified AI System MCP Gateway @happy520ai/unified-ai-systemSelf-hosted MCP gateway for Codex, Cursor, and Cline with provider-free prompt enhancement.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.8 GitHub stars.
- Covenant Guard @opencovenant/guardHard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.8 GitHub stars.
- Safedb @narekmalk/safedb-mcpA secure MCP server that lets AI agents query databases safely.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
- MCP Safety Warden @gautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- Code Auditor @benahammond/code-auditor-mcpEnforces architectural invariants and code quality rules inside your AI agent's edit loop.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.8 GitHub stars.
- Sdk @mnemopay/sdkMemory + wallet for AI agents. Real payment rails, Agent FICO 300-850, Merkle audit, identity.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
- GroundLens @groundlens-dev/groundlensVerify AI answers and executions and seal signed, offline-verifiable evidence records.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Yapitalism @aytuncyildizli/yapitalismDrive terminal coding agents by voice, with receipts that never claim more than they proved.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Bastion @gowthaman90/mcp-bastionReliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- PlanWright @planwright/planwrightControl plane for autonomous software labor. Agents claim objectives over MCP with audit trail.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.7 GitHub stars.
- MCP-Bastion @vaquarkhan/mcp-bastionSecurity middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Mneme @patsa2561-art/mneme-aiMemory layer for AI coding assistants. Indexes git history + code, exposes via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- AccInt @maxbaluev/accintLocal Work Model MCP server for agent work that learns from real outcomes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
- Agent Discover @keshrath/agent-discoverFind, install and enable MCP servers mid-session on any host, with consent and tool pinning6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
