- Apple Shortcuts @mindstone/mcp-server-apple-shortcutsMCP server for Apple Shortcuts via the macOS shortcuts CLI4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- cli2mcp @ronieneubauer/cli2mcpWrap any CLI as a Model Context Protocol server - schema auto-inferred from --help.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- MobiLoop @enessubass/mobiloop-mcpGuarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- Fedit @kehsiaocuba-ux/feditGo-based MCP server for surgical file editing: anchored insert, delete, replace, move, copy.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.11 GitHub stars.
- AitherOS ADK @aitherium/aither-adkAgent runtime with typed memory, knowledge and code graphs, plus file and web tools7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- SAGE Wrapper @psycgod/sageCommand wrapper MCP server for coding agents, compression, workflows, and local automation.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Clawtouch @tinqiao-oss/clawtouch-mcpUSB-HID keyboard/mouse (Pico 2, open firmware) as MCP tools; --mock runs with no hardware5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Sshmcp @nikolanddtesla/sshmcpSSH server management with zero-token SFTP file transfer and SOCKS proxy support10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Aperion Shield @aperionai/shieldLocal guardrail proxy that blocks destructive MCP tool calls, rug pulls, and tool poisoning5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- Sauce @saucelabs/sauce-api-mcpAn open-source MCP server that provides LLM access to the Sauce Labs API4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Che Apple Mail @kiki830621/che-apple-mail-mcpApple Mail MCP — 44 tools, SQLite millisecond search, .emlx parser, batch ops6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.10 GitHub stars.
- Clipboard MCP @mnardit/clipboard-mcpCross-platform MCP server for system clipboard access (read, write, watch)5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.10 GitHub stars.
- Apple Reminders @high5-ventures/apple-remindersFast, native macOS Apple Reminders via EventKit. 10-200x faster than AppleScript alternatives.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- fcp-mcp — Final Cut Pro MCP Server @dreliq9/fcp-mcpFinal Cut Pro MCP — 88 tools: FCPXML engine, live FCP control, media analysis, puppets.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Sanctuary @sanctuaryprotocol/sanctuaryOpen-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Occasio @occasiolabs/occasioTamper-evident, Sigstore-signed audit trail for Claude Code agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Core @electron-stagewright/coreAgent-native MCP server for driving, inspecting, and asserting on real Electron desktop apps.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Shell Exec @domdomegg/shell-exec-mcpExecute bash commands with background job support.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Protect @scopeblind/protect-mcpFail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- ibara @mayberrydt/ibaraComputer use for your agents across the Omarchy machines you own. Open source MCP server.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
- SilbercueSwift @silbercue-io/silbercueswiftFastest iOS MCP server. 40 tools: xcresult parsing, WDA automation, 0.3s screenshots.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.8 GitHub stars.
- Deskwright @tristanmuzzu/deskwrightAgents use real GNOME/Wayland apps: on your screen, or an invisible second desktop you never see6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- ssh-mcp @gelse/ssh-mcpMCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.8 GitHub stars.
- fs-mcp-rs @nihmadev/fs-mcp-rsA fast, configurable filesystem server for the Model Context Protocol (MCP), written in Rust.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
