- shyn @shyn/shynLocal-first ambient memory for your Mac — pages, meetings, notes, encrypted on-device.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Sandbox Env MCP @hs3434/sandbox-env-mcpPersistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Cursor Proxmox MCP @hackmods/cursor-proxmox-mcpManage Proxmox VE via Cursor: QEMU, LXC, storage, HA, firewall, access.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Codex ServerOps MCP @cyyprezz/codex-serverops-mcpStateful Windows OpenSSH server operations for Codex with local credential handling.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Adobe @ajsmonty/adobe-mcpDrive Adobe CC (AE, Photoshop, Illustrator, Premiere, Character Animator) from any MCP client6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- LLM Provider MCP @manishiitg/llm-provider-mcpDelegate asynchronous coding jobs between Claude Code, Codex, Cursor Agent, and Pi.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Runeward @runewardd/runewardGoverned execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- AISentinel by BizDNAi @kabzhanov/aisentinelPre-tool policy enforcement + JSONL audit for AI agents. Apache 2.0.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- ConnectWise Automate @wyre-technology/connectwise-automate-mcpMCP server for ConnectWise Automate RMM — computers, clients, alerts, and scripts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- OmniFocus @steveardis/omnifocusFull CRUD MCP server for OmniFocus via Omni Automation — tasks, projects, folders, tags, recurrence.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Windy Word @sneakyfree/windy-word-mcpControl Windy Word voice-to-text from any MCP agent — 60 tools across 12 categories.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ag Bash @sairam0424/ag-bashSandboxed AI-native bash with 70 agentic tools: run_bash, code edit/diff, WASM Python/JS.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Docker @rog0x/dockerDocker container management and Dockerfile analysis5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Calendar.app @p-l-ta/calendar-mcpList, search, and manage calendar events via macOS Calendar.app across all configured accounts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Mail.app @p-l-ta/mail-mcpSearch, read, send, and manage email via macOS Mail.app across all configured accounts.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- DiskCleanKit @namtran/diskcleankit-mcpMCP server for DiskCleanKit - One Touch Scan and Clean for Mac6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- open-compute (computer-use) @lukisch/open-compute-mcpModel-agnostic computer-use MCP: screenshot, safety-gated actions, Windows UIA targeting.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- realhands - Real Desktop Computer Use @kanishka089/realhandsLets Claude drive your REAL mouse, keyboard and screen - works in your own logged-in apps.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- xcforge - iOS MCP Server & CLI @justinthevoid/xcforge95 MCP tools for iOS — build, test, simulate, automate UI, capture, and diagnose.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- tmux-mcp @fr1sk/tmux-mcpMCP server for tmux — browse sessions, capture output, send commands.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- SFTP Orchestrator @fkom13/mcp-sftp-orchestratorServeur MCP pour l'orchestration de tâches distantes (SSH/SFTP) avec une file d'attente persistante.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Assiststudio Runner @fieldcure/assiststudio-runnerWindows-only headless LLM task automation engine with scheduling via Windows Task Scheduler.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.1 GitHub stars.
- Filesystem @fieldcure/filesystemSecure MCP server for sandboxed filesystem operations with document parsing support.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.1 GitHub stars.
- Dingdawg Governance @dingdawg/dingdawg-governanceUniversal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
