- Jshookmcp @vmoranv/jshookmcpSearch-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2,035 GitHub stars.
- OpenOSINT @openosint/openosintAI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1,744 GitHub stars.
- ToolUniverse @mims-harvard/tooluniverse2,700+ scientific tools for AI scientists: life science, research, literature, and more.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1,718 GitHub stars.
- GoModel @enterpilot/gomodelSelf-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1,228 GitHub stars.
- Unreal Engine @chir24/unreal-engine-mcpAutomate the Unreal Editor (UE 5.0-5.8): levels, Blueprints, UI, materials, VFX and more.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.911 GitHub stars.
- SEO Monster @avansaber/seo-monsterLocal-first SEO MCP: track AI citations, Search Console, GA4, PageSpeed, Cloudflare, IndexNow, CrUX.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.537 GitHub stars.
- Claudexor @razzant/claudexorRoute coding work across Claude Code, Codex, Cursor, and OpenCode with shared context.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.501 GitHub stars.
- Flyto Core @flytohub/flyto-coreExecution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.483 GitHub stars.
- Blockrun @blockrunai/blockrun-mcpWeb search, deep research, prediction markets & crypto data for AI agents. Pay per call via x402.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.391 GitHub stars.
- MCPProxy @smart-mcp-proxy/mcpproxy-goLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.387 GitHub stars.
- Omnisearch @spences10/mcp-omnisearchMCP server for integrating Omnisearch with LLMs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.352 GitHub stars.
- Search Console MCP @saurabhsharma2u/search-console-mcpGoogle Search Console + Bing + GA4 + AdSense — unified SEO intelligence for AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.300 GitHub stars.
- Codex Bridge @fanch-hui/codex-bridgeConnect MCP clients to local Codex Bridge agents, projects, approvals and workspace tools.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.252 GitHub stars.
- Codex Bridge @yeyuancc0-glitch/codex-bridgeConnect MCP clients to local Codex Bridge agents, projects, approvals and workspace tools.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.249 GitHub stars.
- Glade @glade-tool/glade-mcpControl the Unity and Godot editors from AI clients: scenes, scripts, physics, materials.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.231 GitHub stars.
- Arr @aplaceforallmystuff/mcp-arrMCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.224 GitHub stars.
- MPP32 @mpp32/mpp32-mcp-serverPayment layer for AI agents. One MCP, five protocols, thousands of paid APIs your agent can call.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.221 GitHub stars.
- mcptoon @activeing123/mcptoonMCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.219 GitHub stars.
- Gemini @rlabs-inc/gemini-mcpGemini 3 MCP server with 30+ tools: images, video, research, TTS, code exec & CLI7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.217 GitHub stars.
- Crowdsentinel @thomasxm/crowdsentinel-mcp-serverAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.209 GitHub stars.
- Reversecore MCP @sjkim1127/reversecore-mcpSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.208 GitHub stars.