- IsolatedTester — TinkyVision system @agewellepm/isolated-testerIsolated macOS app tests, MCP images, OCR/ASCII frames, accessibility and evidence reports.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Macos @dockndevai/mcp-macosObserve & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- sift @slymnysr/siftRuns a command, keeps every byte on disk, returns only the lines that matter8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- OpsMaxx @opsmaxx/opsmaxxSSH, files, containers and databases via the OpsMaxx desktop app - scoped per capability, audited.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- sudo-proxy @tarides/sudo-proxyPrivileged command execution proxy with human approval via pkexec or sudo9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- simframe @lvlrsajjad/simframeAlways-warm iOS Simulator and Android emulator frames: agents read the screen in ~20ms7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- agentguard @agentwares/agentguardMCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Rentctl @michael-drake/rentctlLeased dev environments — every server dies when its AI session ends.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Phosphor @kirusshenkin/phosphorHosts, metrics, Docker and authorized_keys over a macOS terminal's live SSH connections7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Unofficial Apple Music for macOS @jaminben/secure-applemusic-mcp-for-osxAsk for a playlist. Get a real one, playing in Apple Music — no account, nothing stored.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Quickshell MCP @franklinnolasco7/quickshell-mcpSource-grounded Quickshell, QML, and Qt documentation, examples, and real-world implementations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- 2native SSH MCP Server @daidaij/2native-ssh-mcpSSH-based MCP server for remote command execution and file transfer. Credentials stay local.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- doublespeed — Xcode as an API @doublespeed/mcpBuild, test and run iOS apps on a remote Mac from any machine. XcodeBuildMCP-compatible tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Prefab @prefabapp/prefabList, create and deploy your Prefab project templates from any MCP agent.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Obsidian CLI MCP @dariuscorvus/obsidian-cli-mcpLocal MCP server for Obsidian Desktop via the official Obsidian CLI.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Charles Local MCP @eason0in/charles-local-mcpGuarded local Charles Proxy automation and bounded XML session evidence8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Sandbox as a Service @sandbox-as-a-service/mcpGive an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Notify @mrfqcentic/mcp-notifyMinimal MCP server that plays a sound and shows a system banner when an AI agent finishes a task3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Ikenga iyke (control bridge) @ikenga/mcp-iykeDrive a running Ikenga desktop app from MCP clients — DOM, click, type, navigate, screenshot.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Qodercli @cantbeblank96/qodercli-mcpMCP server mode for Qoder CLI — delegate coding tasks to local Qoder agents from any MCP client.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Klo @getklo/klo-mcpNative Mac video editor your agent can drive: 83 timeline tools, media stays on your Mac.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Screenify Studio @screenify/screenifyRecord your screen and export studio-styled demo videos on macOS, driven by your AI assistant.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- tmux @libtmux/tmux-mcp-goDrive one tmux server: sessions, windows, panes, and the output they produce.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- tvsub MCP @launzi/tvsub-mcpControl tvsub for Apple TV.app: subtitles, glossary-aware translation, overlay, styling, and sync.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
