- Hotato @attenlabs/hotatoOpen-source, self-hosted conversation QA for voice agents. MIT.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Create Starter @starter-series/create-starterScaffold Starter Series projects and check release, deployment, security, and agent instructions.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- MCP Health Monitor @oaslananka/health-monitor-mcpMonitor MCP, CI, and HTTP targets with health history, TLS expiry, assertions, and diagnostics3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- GitLab CI @mshegolev/gitlab-ci-mcpGitLab CI/CD MCP — pipelines, jobs, schedules, MRs, files. Any GitLab (SaaS or self-hosted).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Syke @khalomsky/sykeAI code impact analysis — dependency graphs, cascade detection, and build gates for AI agents5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Taskbounty Check @eliottreich/taskbounty-checkLocal GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- MCP Gitlab @crunchtools/gitlabSecure MCP server for GitLab projects, merge requests, issues, and pipelines4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Waitbus @astrogilda/waitbusWorkstation-local event bus: agents wait on or emit CI/pytest/Docker/filesystem events, no polling.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- MCP Compliance @yawlabs/mcp-complianceCLI tool and MCP server that tests MCP servers for spec compliance2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Probe @incultnitollc/mcp-probeInspect and score any MCP server 0-100 on publishability, schema and protocol before publish.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- CodemagicMcp @agimaulana/codemagicmcpCodemagic CI/CD MCP Server — manage builds, apps, artifacts, and caches from your AI4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Versions-LE @nolindnaidoo/versions-leFind where one dependency is constrained differently across a repository's manifests.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Groundwork @nickjlamb/groundworkDeployment-readiness checks for document-QA and extraction AI: grounding, extraction, CI gate.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- AOTrust Notarization & Evidence Server @aotrust/notaryCryptographic proof of existence for AI agents. x402 on Base or Solana, NEAR anchored. Free tier.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Action Runtime Sunset Lint @jmshinhwa/action-runtime-sunset-lintFinds the GitHub Actions steps that stop running on 2026-09-23, with the version to move to4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Actions Deprecation Lint 2026 @jmshinhwa/actions-deprecation-lint-2026Node 20 is removed from GitHub-hosted runners on 2026-09-23 and ubuntu-22.04 deprecation opens 20265% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Octri CLI @octri/cliPush OpenAPI specs, build SDKs in ten languages, publish API docs, and triage production SDK errors.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Genesis Agent @genesiscode2026/genesis-agent-mcpPay-per-call x402 MCP tools on Base USDC: Release Guardian + Workflow Runner.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- DeliverKit @muzimu217/deliverkitPlan and verify multi-ecosystem packaging (Linux, Windows, macOS, HarmonyOS) for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Depot (depot.dev) @akshayjain3450/depot-mcpRead-only MCP server for Depot (depot.dev): CI failure diagnosis, build forensics, and usage.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GoCD @sahilll15/gocdMCP server for GoCD: dashboard, pipelines, artifacts, agents. Context-lean output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Azure DevOps @dockndevai/mcp-azure-devopsAzure DevOps boards, repos, pipelines & projects for AI agents — governed.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Evolveguard @rudrendupaul/evolveguardWraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- devmcp @rudranaresh0201/devmcpGit/CI MCP server with the full protocol surface (tools, resources, prompts, roots, sampling).5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
