- Agenthub Monitor @nevelsk65/agenthub-monitorRenders a pipeline DAG and test-harness dashboard inline as an MCP App3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- SayDo @vince-gonzalez/saydoDoes the tool do what it says? Conformance receipts for MCP servers, and unknown when unchecked.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Woodpecker CI @ni-c/woodpecker-ci-mcpRead Woodpecker CI repositories, pipelines and logs, and drive builds, secrets and crons3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- codev @flxbl-io/codevConnect AI agents to codev for Salesforce projects, builds, releases, validations, and insights.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- doublespeed — Xcode as an API @doublespeed/mcpBuild, test and run iOS apps on a remote Mac from any machine. XcodeBuildMCP-compatible tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Expo @mcp-dir/expo-mcpYour Expo and EAS project in natural language: up to date SDK docs, cloud builds (status, logs, trig5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Chart Color Audit @socraticstatic/chart-color-auditCI-friendly accessibility audit for chart color palettes: WCAG contrast, CVD simulation, OKLab ΔE.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bamboo MCP Server @hmdmph/bamboo-mcpRead-only MCP server for self-hosted Atlassian Bamboo CI/CD4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- SemVer Checks @kyungseopk1m/semver-checksDetect breaking changes in your TypeScript library's public API and recommend the SemVer bump.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Scanpay @misterio070/scanpayCode security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agent Eval @rudrendupaul/agent-evalStatistical regression testing for LLM agents: p-value, effect size, and CI on behavior change.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- lastseen mortality @lastseen/mortalityCheck whether an npm package, GitHub Action, MCP server or Docker image is dead or abandoned.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- rendercheck @rogermsc/rendercheckCheck generated audio, video and stills for defects. Returns a verdict, not more media.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- LineBreak Gate & Spec Bridge @linebreakapp/linebreak-gateApproved acceptance criteria served over MCP to Claude Code, Cursor, or Codex. Git-only, sealed.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Hwcontract @mohibshaikh/hwcontractJudge hardware timing/serial against a contract: pass/marginal/fail (WS2812, DShot, logs)3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- BountyVerdict Agent Decision Tools @mimirs402/bountyverdictFree selector plus read-only GitHub bounty, agent harness, Actions, flake, and MCP drift decisions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- BountyVerdict Agent Decision Tools @cristianmoroaica/bountyverdictRead-only GitHub bounty, agent harness, Actions failure, flake, and MCP tool-drift decisions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Understand Anything - MCP @uamcp/ua-mcpA powerful MCP server for codebase architecture analysis and automated governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CICD AIops @aiops-tools/cicd-aiopsGoverned self-managed GitLab + Gitea CI/CD ops: pipelines, runners, artifacts, RCA. 28 tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- MCP Blast-Radius Auditor @aos-standard/mcp-blast-radiusStatic blast-radius audit for MCP servers before agent install. Manifest optional.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- npx-vibe @devrajsinh-jhala/npx-vibeRead-only npm package and project dependency preflight tools for AI applications.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- StyleSafe @patrizzos/stylesafeMCP server and CLI that catches CSS cascade conflicts and Tailwind utility clashes before they ship.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MCP Protocol Conformance @studiomeyer/protocol-conformanceMCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Release Readiness Triage @vola-trebla/release-readiness-triage-mcpAggregates CI failures, cross-references flakiness history, and outputs GO/NO_GO release verdicts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
