- agentpc @pawanpaudel93/agentpcInstant, resettable Windows, Ubuntu and Arch Linux ARM desktop VMs for AI agents on Apple Silicon.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.2 GitHub stars.
- Aziel Runtime @azieleliab/aziel-runtimeGoverned MCP: agent audit, provenance, deterministic checks, and receipt-backed FragGate execution.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- OpenCode MCP Bridge @manuotel/opencode-mcp-bridgeCoordinate and verify OpenCode workers over MCP Streamable HTTP.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- Figma Bridge @kolganovr/figma-mcp-bridgeWrite to a live Figma canvas, get a screenshot back, and roll back mistakes. Zero deps, free plan.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- HubVibe: Pay-per-Call Agent Tools: Web Search, Email Verify, KYC Screening, Stocks, Crypto, News @its-fortunatefolly/hubvibe70+ pay-per-call tools for AI agents: web search, email verify, KYC, stocks, crypto, news, data8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Google Jules @georgeracu/google-jules-mcp-serverModel Context Protocol server for Google's Jules AI coding agent7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Hyper @tuananh/hyper-mcp📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
- No Crd @nogoo9/no-crdDynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- ArcAgent MCP @araujota/arcagent-mcpArcAgent MCP server for bounty discovery, workspace execution, and verified coding submissions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.2 GitHub stars.
- SandboxAPI @michielderuiter/sandboxapi-mcpExecute code in 8 languages (Python, JS, TS, Go, Java, C++, C, Bash) in gVisor sandboxes.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.2 GitHub stars.
- Itamos MCP Tools @itamos-technologia/itamos-mcp-toolsCode-map tools for AI agents: see a repo's structure first, then edit only what matters.Not assessed yet.A remote server; you sign in with your account.1 GitHub stars.
- Reverse Engineering @daedalus-io/mcp-reverse-engineeringA sandboxed MCP tool for reverse engineering with multiple tool integrations7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Rokha @rokha/rokhaSearch a registry of agent skills and MCP servers, then run them for real. No install, traced.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Runtime Cloud @withruntime/runtimeLinux microVM sandboxes for AI agents: run commands, files, processes, pause and wake.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Opa Authz @kanywst/mcp-opa-authzAuthorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Sandbox Env MCP @hs3434/sandbox-env-mcpPersistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Exec Sandbox @inhuman/mcp-execSingle exec tool running caller Python in a network-isolated locked-down sandbox.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Runeward @runewardd/runewardGoverned execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Citadel @sustinbebustin/citadel-mcpA growing Citadel of stack-specific docs, served as MCP tools for AI coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ag Bash @sairam0424/ag-bashSandboxed AI-native bash with 70 agentic tools: run_bash, code edit/diff, WASM Python/JS.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Rotifer Protocol MCP @rotifer-protocol/mcp-serverSearch, compare, and install self-evolving AI Agent Genes ranked by Arena fitness7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Python Exec Sandbox @lu-zhengda/mcp-python-exec-sandboxSandboxed Python execution for AI agents. PEP 723 inline deps, multi-version Python, zero pollution.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- FetchSandbox @fetchsandbox/mcpA deterministic verification engine for agents. Proves a fix: fails on the old code, passes on new.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Declaw AI MCP @declaw-ai/mcp-serverSecure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
