- Waitbus @astrogilda/waitbusWorkstation-local event bus: agents wait on or emit CI/pytest/Docker/filesystem events, no polling.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- MCP Compliance @yawlabs/mcp-complianceCLI tool and MCP server that tests MCP servers for spec compliance2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Probe @incultnitollc/mcp-probeInspect and score any MCP server 0-100 on publishability, schema and protocol before publish.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- CodemagicMcp @agimaulana/codemagicmcpCodemagic CI/CD MCP Server — manage builds, apps, artifacts, and caches from your AI4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Versions-LE @nolindnaidoo/versions-leFind where one dependency is constrained differently across a repository's manifests.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Groundwork @nickjlamb/groundworkDeployment-readiness checks for document-QA and extraction AI: grounding, extraction, CI gate.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- AOTrust Notarization & Evidence Server @aotrust/notaryCryptographic proof of existence for AI agents. x402 on Base or Solana, NEAR anchored. Free tier.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Action Runtime Sunset Lint @jmshinhwa/action-runtime-sunset-lintFinds the GitHub Actions steps that stop running on 2026-09-23, with the version to move to4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Actions Deprecation Lint 2026 @jmshinhwa/actions-deprecation-lint-2026Node 20 is removed from GitHub-hosted runners on 2026-09-23 and ubuntu-22.04 deprecation opens 20265% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Octri CLI @octri/cliPush OpenAPI specs, build SDKs in ten languages, publish API docs, and triage production SDK errors.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Genesis Agent @genesiscode2026/genesis-agent-mcpPay-per-call x402 MCP tools on Base USDC: Release Guardian + Workflow Runner.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- DeliverKit @muzimu217/deliverkitPlan and verify multi-ecosystem packaging (Linux, Windows, macOS, HarmonyOS) for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Depot (depot.dev) @akshayjain3450/depot-mcpRead-only MCP server for Depot (depot.dev): CI failure diagnosis, build forensics, and usage.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GoCD @sahilll15/gocdMCP server for GoCD: dashboard, pipelines, artifacts, agents. Context-lean output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Azure DevOps @dockndevai/mcp-azure-devopsAzure DevOps boards, repos, pipelines & projects for AI agents — governed.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Evolveguard @rudrendupaul/evolveguardWraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- devmcp @rudranaresh0201/devmcpGit/CI MCP server with the full protocol surface (tools, resources, prompts, roots, sampling).5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- EdgeGate @frozo-ai/edgegate-mcpRegression-test AI models on real Snapdragon and Jetson hardware, with signed evidence for CI.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Invigil @invigil/invigilLinters check your code. Invigil checks whether your repo is legible — to newcomers and AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- andon @gulmezeren2-byte/andonDeterministic verification for AI-generated analysis: run a spec, inspect or diff a workbook4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- regressGuard @bharath-code/regressguardDeterministic API regression checks for AI agents: snapshot a baseline, catch broken contracts.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Evidrift @bm1016bm-svg/evidriftCatch TypeScript API and OpenAPI contract drift in AI-generated code, then revalidate it in CI.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GAUNTLEX @sanjoy1234/gauntlexConcurrent Builder + Breaker agents generate code and adversarial tests at once, gated in CI.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Drone CI/CD MCP Server @yusiwen/drone-mcp-serverMCP server for Drone CI/CD: 45 tools for builds, repos, secrets, users and templates4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
