- AgentMetal @agentmetal/agentmetalRent a Linux VPS from an AI agent: provision, SSH in, run commands. Pay USDC (x402) or card.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Baton @kanumuri9593/batonRun, hot-reload and screenshot Flutter, web, React Native and native iOS/Android apps.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- ERIUS PHONE @protremix/erius-phone-mcpDrive a hosted ERIUS PHONE Android device: read the screen, tap, type, install APKs, get crash logs.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- sealkeep @munhq/sealkeepLet AI agents use secrets without seeing them: inject into a command, redact the output.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- keygrant @bazingaedward/keygrantRun commands with API keys injected per call — values never enter model context.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- JumpServer Bastion (jms) @mifazhan/jms-clientRun commands, transfer files and browse assets on a JumpServer v4 bastion from your AI assistant.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- MAX+plus II MCP / 数字电路 AI 工具 @hachimeder/maxplus2-mcpMAX+plus II / MaxPlus2 MCP: GDF/SYM/SCF, compile/simulation. 原理图、波形、编译仿真与 Windows 自动化。5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Cursor @qmediat/cursor-mcpCursor's agent (cursor-agent CLI) through MCP: any model your plan offers, resumable sessions.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- PrintGo @nishkalkashyap/printgoPrint PDFs, images, text, Markdown and HTML to your local printers, and track or cancel the jobs.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- AgentGo @nishkalkashyap/agentgoRun Codex and Claude Code on your computer from an MCP client, and track or continue their runs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agent Runtime Guard @dshcorrectover/agent-runtime-guardAgent 运行时全栈拦截: allow/deny tool calls, Ed25519 receipts, blocks RCE, theft, SSRF, injection. stdio.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- kasm-use @rchurro/kasm-useComputer-use for Kasm Workspaces: lets AI agents see and drive your Kasm desktops over KasmVNC.Not assessed yet.Runs on your machine, installed from PyPI.1 GitHub stars.
- Office MCP @gauravvvvvvvvvv/office-mcpLocal Windows MCP server for creating and reviewing Excel, Word, and PowerPoint files.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Vaultshell @sowhati/vaultshellInjects secrets into shell commands at exec time; plaintext never reaches the LLM context4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- VPN Bypass @geiserx/vpn-bypass-mcpRead and change VPN Bypass (macOS) routing: domain lists, services, modes, kernel routes, logs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Turnback @mfaizr77/turnbackUndo a coding agent turn, including shell commands and untracked files.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Apple Notes Snapshot @xiaojiou176-open/apple-notes-snapshotLocal-first Apple Notes backup control room for macOS with a read-only MCP surface.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Flyto2 Runtime @flytohub/flyto-runtimeSelf-hosted MCP runtime for ChatGPT to edit files, run commands, and test local projects.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
- KVM/libvirt VMs and backups (Fedora) @amineutron/fedora-agentsManage local KVM/libvirt VMs and Timeshift/Borg backups on Fedora: start, stop, clone, snapshot.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ForgeBridge @t1ktakdev/forgebridgeA local, permissioned MCP agent for authorized developer workstations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- VPS Ops @koller-nexus/vps-ops-mcpStdio MCP server that inspects and (with confirmation) mutates one VPS over SSH.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Computer @agent360dk/computer-mcpmacOS computer use with the guardrails on: passwords blacked out, writes need consent, all logged.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ApplyGenie @eternalcodertanishq3/applygenie-mcpAutonomous job application copilot, ATS form filler, and AI mock interview engine.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Askew — iPhone, iPad and Mac via Shortcuts @dominic-dk/askew-mcpRun iPhone Shortcuts through an encrypted relay, or assigned auto-mode Shortcuts on this Mac.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
