- Xcode: MCP Bridge Wrapper for Cursor @soundblaster/xcode-mcpbridge-wrapperPython wrapper that makes Xcode's MCP bridge compatible with strict MCP clients like Cursor4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.20 GitHub stars.
- Bun Uia @obscuritysrl/bun-uiaPlaywright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.20 GitHub stars.
- KeyShot MCP @truman-t3/keyshot-mcpControl local KeyShot scenes, cameras, environments, and renders through headless scripting.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- pty-mcp @raychao-oao/pty-mcpInteractive PTY sessions over MCP: local shells, SSH, serial ports, and persistent remote sessions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.19 GitHub stars.
- DeepADB @fullread/deepadbFull-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- Clipboard History MCP @d-khomenko/clipboard-history-mcpYour clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.19 GitHub stars.
- Interactive Terminal @amol21p/interactive-terminalMCP server for real interactive terminal sessions — REPLs, SSH, databases, Docker5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- Ironclaw @ironsecco/ironclawSandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.19 GitHub stars.
- Iconnect @heznpc/iconnectMCP server for the entire Apple ecosystem — 123 tools across 14 modules. macOS only.Not assessed yet.Runs on your machine, installed from npm.18 GitHub stars.
- glass @fixed-width/glassMCP server giving a coding agent a build→see→interact→debug loop over native GUI apps.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.18 GitHub stars.
- replicant-mcp @thecombatwombat/replicant-mcpAndroid MCP server for AI-assisted development. Build, test, emulate, and automate.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- AirMCP @heznpc/airmcpGoverned MCP runtime for the Apple ecosystem, available on macOS with per-call approval.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Weapp Agent @chaixueyuan/weapp-agent-mcpAgent-first MCP server for WeChat Mini Program debugging & automation via WeChat DevTools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Droidline @knifelemon/droidlineLet an AI agent see and use a real Android phone over Wi-Fi, without ADB or root.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.17 GitHub stars.
- Netwright @ricfanin/netwrightPlaywright-style automation of .NET desktop apps (WPF, WinForms, WinUI) for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.17 GitHub stars.
- Plonk @ostapondo/plonkPlonk gives agents local macOS tools for windows, workspaces, screenshots, OCR, and more.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- WPF Visual Tree @faze79/wpf-visual-treeLet AI agents inspect and drive running WPF apps: tree, bindings, screenshots, clicks, text input.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.17 GitHub stars.
- mac-control-mcp @adelelo13/mac-control-mcpNative Swift macOS automation — 153 tools: AX, EventKit, voice, browser DOM, undo.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.17 GitHub stars.
- Claude KVM @aras-workspace/claude-kvmMCP server — control remote desktops via VNC with a native Swift daemon and Apple Vision OCR8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- LLM CLI Gateway @verivus-oss/llm-cli-gatewayOne MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- Proxmox @antonio-mello-ai/mcp-proxmoxManage Proxmox VE clusters through AI assistants — VMs, containers, and more5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- Octofs @muvon/octofsStandalone MCP filesystem tools server — view, edit, shell, workdir.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- FiveM MCP @ziyacivan/fivem-mcpBuild, run and live-test FiveM servers with AI agents: RCON, DevCon, window control, mcpb bridge.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- SysKnife @lacs-project/sysknifeAdministers Linux via typed, approval-gated actions with an Ed25519-signed audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.15 GitHub stars.
