- Reverse Engineering @daedalus/mcp-reverse-engineeringA sandboxed MCP tool for reverse engineering with multiple tool integrations7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Agent Workspace MCP @hrrodan/agent-workspace-mcpA sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Sprites MCP Server @sprites/mcpManage Sprites: sandboxed compute environments with exec, services, and checkpoints.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Kael MCP Server @dreamingms/kael-mcp-server16 AI-native tools with dual SSE + streamable-http transport. Free tier available.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- fcvm @carlosbravoa/fcvmDisposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Spawner @flosk6/spawnerPreview environments on your self-hosted Spawner server: a copy of your app for each git branch3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- agend-sh @agend-sh/agend-shPersistent Linux environments for AI agents, with interactive terminals and HTTPS previews.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- macbox @opslane/macboxA real Mac for your agent: build, test, run, and tap through iOS apps on the simulator.Not assessed yet.Runs on your machine, installed from npm.
- Legwork @kumarganduri/legworkLets your AI find open-source tools on GitHub and install them as sandboxed MCP tools.Not assessed yet.Runs on your machine, installed from PyPI.
- Burrowbox @burrowbox/burrowboxPersistent Linux computers for AI agents: desktop, signed-in browser, vault, apps and shell.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Codex Subagent @parisbs/codex-subagent-mcpDelegate coding tasks to the OpenAI Codex CLI, installed separately, with explicit model and effort.Not assessed yet.Runs on your machine, installed from npm.
- chargehand @egoushka/chargehandRuns coding-agent workers on a codebase question; every claim in the answer carries evidence.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
- Symbioza @symbioza/symbiozaRun a GPU job under a hard dollar cap and collect the files it writes.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- HackerEarth MCP @pratham-jain33/hackerearth-mcpGive any AI assistant a code run button via HackerEarth. 24 languages, zero setup.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- ParallelSandbox @parallelsandbox/parallelsandboxRemote Linux boxes for coding agents: Docker, a browser, screenshots, logs, human takeover.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- B2IGE Verify @b2ige2-a11y/b2ige-verifyIndependent deterministic verification for AI-written software. Local, evidence-backed checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Capsulate @capsulatedev/capsulateReal Linux and Windows desktop VMs for AI agents: exec, files, computer-use and snapshots via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Ebook File Check @powmcp/epub-checkRun EPUBCheck for EPUB specification errors and compare two exports.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Mcphost @mcphost/mcphostHosted MCP runtime where your agent publishes its own tools by tool call and keeps working.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Run Python @hal9ai/run-pythonRun Python code from natural language prompts, with optional PyPI package install.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Official Source Evidence @joshua-stapleton/official-source-evidenceAccountless public-source, SEC Form D and OFAC tools with x402 USDC payment on Base.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Verdict @dgotlieb/verdict-mcpSandboxed test runs for coding agents: compact typed verdicts with failure fingerprints and history3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Soma @medianemi-beep/somaExecution-verified code generation and verification with signed, offline-checkable certificates.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sandbox as a Service @sandbox-as-a-service/mcpGive an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
