- Aiglare @nugehs/aiglareAudit AI/LLM features for governance guardrails: confidence, fallback, validation, human-in-loop.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- bouncer @nugehs/bouncerStatic compliance-controls checker for UK Online Safety Act & ICO Children's Code. CLI + MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Deterministic @archradhq/deterministicDeterministic IR/IR-LINT validation, policy packs, drift vs exports (archrad). Apache-2.0.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ProofSlip @proofslip/mcp-serverReceipt-based verification for AI agent workflows — create, verify, and poll ephemeral proof objects5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Tewip @hmamut39/tewipProves software work: triages failing tests, checks whether a test can fail, and reads migrations.Not assessed yet.Runs on your machine, installed from npm.
- orm-preflight @sikandar100/orm-preflightChecks TypeORM migrations for data loss, table locks, and deploy problems before they run.Not assessed yet.Runs on your machine, installed from npm.
- ClaimGate - claim check before you publish @caseone115/claimgateFlag marketing claims your evidence cannot substantiate, before you publish.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- ClaimGate starter kit - set up a publish gate @caseone115/claimgate-kitSet up a publish gate for AI-assisted marketing copy: policy, evidence folder and CI job.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Rupa3D @tiranyx/rupa3dChecks GLB assets against a spec without Blender and embeds the measured proof inside the GLB.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Django Chainsaw @syrian963/django-chainsaw-mcpFinds what will hurt in a Django project: cascades, N+1, unsafe migrations, tenant leaks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Shipi18n @shipi18n/shipi18nCheck locale files for broken placeholders, plurals and missing keys. Validators need no API key.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agenthub Monitor @nevelsk65/agenthub-monitorRenders a pipeline DAG and test-harness dashboard inline as an MCP App3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- SayDo @vince-gonzalez/saydoDoes the tool do what it says? Conformance receipts for MCP servers, and unknown when unchecked.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Woodpecker CI @ni-c/woodpecker-ci-mcpRead Woodpecker CI repositories, pipelines and logs, and drive builds, secrets and crons3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- codev @flxbl-io/codevConnect AI agents to codev for Salesforce projects, builds, releases, validations, and insights.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- doublespeed — Xcode as an API @doublespeed/mcpBuild, test and run iOS apps on a remote Mac from any machine. XcodeBuildMCP-compatible tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Chart Color Audit @socraticstatic/chart-color-auditCI-friendly accessibility audit for chart color palettes: WCAG contrast, CVD simulation, OKLab ΔE.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bamboo MCP Server @hmdmph/bamboo-mcpRead-only MCP server for self-hosted Atlassian Bamboo CI/CD4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- SemVer Checks @kyungseopk1m/semver-checksDetect breaking changes in your TypeScript library's public API and recommend the SemVer bump.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Scanpay @misterio070/scanpayCode security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agent Eval @rudrendupaul/agent-evalStatistical regression testing for LLM agents: p-value, effect size, and CI on behavior change.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- lastseen mortality @lastseen/mortalityCheck whether an npm package, GitHub Action, MCP server or Docker image is dead or abandoned.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- rendercheck @rogermsc/rendercheckCheck generated audio, video and stills for defects. Returns a verdict, not more media.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- LineBreak Gate & Spec Bridge @linebreakapp/linebreak-gateApproved acceptance criteria served over MCP to Claude Code, Cursor, or Codex. Git-only, sealed.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
