- Flyto Core @flytohub/flyto-coreExecution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.483 GitHub stars.
- Mu @micro/muNews, web search, mail, markets, weather, places, files, calendar, contacts. 67 tools, one endpoint.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.436 GitHub stars.
- Zapier @zapier/mcpHosted MCP server connecting AI assistants to 9,000+ apps and 40,000+ actions via Zapier.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.433 GitHub stars.
- Blockrun @blockrunai/blockrun-mcpWeb search, deep research, prediction markets & crypto data for AI agents. Pay per call via x402.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.391 GitHub stars.
- MCPProxy @smart-mcp-proxy/mcpproxy-goLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.387 GitHub stars.
- Omnisearch @spences10/mcp-omnisearchMCP server for integrating Omnisearch with LLMs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.352 GitHub stars.
- Search Console MCP @saurabhsharma2u/search-console-mcpGoogle Search Console + Bing + GA4 + AdSense — unified SEO intelligence for AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.300 GitHub stars.
- AdLoop @getadloop/adloopGoogle Ads, Reddit Ads, GA4 and Tag Manager in your AI client, with a preview before every change.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.279 GitHub stars.
- QVeris @qverisai/mcpDiscover, inspect, quote, and call external tools, with usage and final credit settlement audits9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.262 GitHub stars.
- Codex Bridge @fanch-hui/codex-bridgeConnect MCP clients to local Codex Bridge agents, projects, approvals and workspace tools.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.252 GitHub stars.
- Codex Bridge @yeyuancc0-glitch/codex-bridgeConnect MCP clients to local Codex Bridge agents, projects, approvals and workspace tools.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.249 GitHub stars.
- Glade @glade-tool/glade-mcpControl the Unity and Godot editors from AI clients: scenes, scripts, physics, materials.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.231 GitHub stars.
- Lobu @lobu-ai/lobuShared, permission-aware company context for AI agents, with provenance, approvals and audit.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.225 GitHub stars.
- Arr @aplaceforallmystuff/mcp-arrMCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.224 GitHub stars.
- MPP32 @mpp32/mpp32-mcp-serverPayment layer for AI agents. One MCP, five protocols, thousands of paid APIs your agent can call.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.221 GitHub stars.
- mcptoon @activeing123/mcptoonMCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.219 GitHub stars.
- Gemini @rlabs-inc/gemini-mcpGemini 3 MCP server with 30+ tools: images, video, research, TTS, code exec & CLI7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.217 GitHub stars.
- Crowdsentinel @thomasxm/crowdsentinel-mcp-serverAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.209 GitHub stars.
- Reversecore MCP @sjkim1127/reversecore-mcpSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.208 GitHub stars.
- SandBase @sandbaseai/cliConnect MCP clients to 2,000+ AI models without managing provider API keys.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.188 GitHub stars.
- Slim Guard @lennney/mcp-slim-guard76% fewer MCP tokens in our standard benchmark. Same upstream call. Exact recovery.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.186 GitHub stars.
- AISIX AI Gateway @api7/aisixSelf-hosted AI gateway that governs MCP servers, LLM traffic, and A2A agents behind one endpoint3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.184 GitHub stars.
- Rubber Duck @nesquikm/rubber-duckBridge to multiple LLMs and CLI agents: councils, debates, voting, and more6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.178 GitHub stars.
- KSail @devantler-tech/ksailSDK for creating, managing, and operating Kubernetes clusters and workloads with ease.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.165 GitHub stars.
