- PrintGo @nishkalkashyap/printgoPrint PDFs, images, text, Markdown and HTML to your local printers, and track or cancel the jobs.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- AgentGo @nishkalkashyap/agentgoRun Codex and Claude Code on your computer from an MCP client, and track or continue their runs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agent Runtime Guard @dshcorrectover/agent-runtime-guardAgent 运行时全栈拦截: allow/deny tool calls, Ed25519 receipts, blocks RCE, theft, SSRF, injection. stdio.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- SudoWhizzy @sudowhizzy/sudowhizzyRenamed to AskYourStack: use com.askyourstack/askyourstack. Same service, now at askyourstack.com.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- kasm-use @rchurro/kasm-useComputer-use for Kasm Workspaces: lets AI agents see and drive your Kasm desktops over KasmVNC.Not assessed yet.Runs on your machine, installed from PyPI.1 GitHub stars.
- Office MCP @gauravvvvvvvvvv/office-mcpLocal Windows MCP server for creating and reviewing Excel, Word, and PowerPoint files.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Vaultshell @sowhati/vaultshellInjects secrets into shell commands at exec time; plaintext never reaches the LLM context4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- VPN Bypass @geiserx/vpn-bypass-mcpRead and change VPN Bypass (macOS) routing: domain lists, services, modes, kernel routes, logs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Turnback @mfaizr77/turnbackUndo a coding agent turn, including shell commands and untracked files.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Apple Notes Snapshot @xiaojiou176-open/apple-notes-snapshotLocal-first Apple Notes backup control room for macOS with a read-only MCP surface.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Flyto2 Runtime @flytohub/flyto-runtimeSelf-hosted MCP runtime for ChatGPT to edit files, run commands, and test local projects.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
- KVM/libvirt VMs and backups (Fedora) @amineutron/fedora-agentsManage local KVM/libvirt VMs and Timeshift/Borg backups on Fedora: start, stop, clone, snapshot.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Runtime Cloud @withruntime/runtimeLinux microVM sandboxes for AI agents: run commands, files, processes, pause and wake.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- ForgeBridge @t1ktakdev/forgebridgeA local, permissioned MCP agent for authorized developer workstations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- VPS Ops @koller-nexus/vps-ops-mcpStdio MCP server that inspects and (with confirmation) mutates one VPS over SSH.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ReMCP @getremcp/remcpSecurely control paired computers with ReMCP.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Computer @agent360dk/computer-mcpmacOS computer use with the guardrails on: passwords blacked out, writes need consent, all logged.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ApplyGenie @eternalcodertanishq3/applygenie-mcpAutonomous job application copilot, ATS form filler, and AI mock interview engine.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Askew — iPhone, iPad and Mac via Shortcuts @dominic-dk/askew-mcpRun iPhone Shortcuts through an encrypted relay, or assigned auto-mode Shortcuts on this Mac.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- CodeZaiku @wyrdsekai/codezaikuA coding and development harness on local models or hosted APIs, for code, review, research and ops.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Universal Host Manager @abktya/universal-host-manager-mcpCross-platform FastMCP server for authenticated remote Linux/macOS host administration8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- CCS Runtime Evidence @dshcorrectover/ccs-mcp-serverAgent tool-call guardrail: fail-closed runtime security verification with Ed25519 evidence receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- YunoHost MCP @imattau/yunohost-mcpNostr-authenticated MCP server for secure YunoHost administration.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- ios-agent @emazaheri/ios-agentDrive a real iPhone or an iOS Simulator with an AI agent, through XCUIAutomation.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
