- Declaw AI MCP @declaw-ai/mcp-serverSecure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Pymetasploit3 @daedalus/mcp-pymetasploit3MCP server for Metasploit Framework via pymetasploit340% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- psyXe MCP Server @bjenkinsgit/psyxe-mcpApple Notes, Reminders, and Contacts for AI assistants. BERT semantic search. macOS.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Mpv @arijit-gogoi/mpv-mcp-serverControl mpv media player — playback, playlists, YouTube streaming, and downloads.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GNOME UI MCP @asattelmaier/gnome-ui-mcpGNOME Wayland desktop automation via AT-SPI discovery and Mutter input.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Impact preview @agent-polis/impact-previewImpact preview for AI agents - see what changes before any action executes.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Nandi Proxmox @nandi-services/nandi-proxmox-mcpMCP server for Proxmox VE management (VM, LXC, nodes)6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Proxy Doctor @jiansen/proxy-doctorDiagnose proxy misconfigurations that break AI coding tools (Cursor, VS Code, Windsurf)3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Agent Workspace MCP @hrrodan/agent-workspace-mcpA sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- PowerShell @imrrd/powershell-mcpHeadless Windows ops over MCP: hidden PowerShell plus in-process SSH, WinRM and SFTP.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Preflight iOS @ethanackerman-git/preflight-ios-mcp57 tools for AI-powered iOS Simulator automation — tap, swipe, type, screenshots, and more.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agents @47-ronn/remote-agentsControl fleets of remote machines via AI agents: exec, files, git, fleet ops, map/reduce.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Clianythingharness @clauxel/clianythingharness-mcpA paid remote MCP for CLI tool MCP, built to return verdicts, receipts, usage logs, and audit-ready12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- Node Command @huseyincig/nc-mcpRemote MCP server exposing your Node Command fleet (files, shell, processes, browser) to AI hosts.Not assessed yet.A remote server; it needs your API key.
- Gizmos Audacity @gizmos-quest/gizmos-audacity-mcpSafe local audio editing, analysis and production in Audacity 3.7 through mod-script-pipe.Not assessed yet.Runs on your machine, installed from npm.
- fcvm @carlosbravoa/fcvmDisposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- ACPI @0xmortuex/acpi-mcpRead ACPI tables from a live QEMU guest or files and explain them for OS developers.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- shotfleet @shotfleet/shotfleetCapture and check localized App Store and Google Play screenshots from your AI agent.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Keeploop @keeploop/keeploopMail, Calendar, Messages, Notes, Contacts, Slack on your Mac for AI. Remote needs Pro or free trial.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Pyjab @gaozhao1989/pyjab-mcpDrive Java desktop apps from an AI agent, through the JVM's own accessibility treeNot assessed yet.Runs on your machine, installed from PyPI.
- Phocinae MCP @phocinae/phocinae-mcpLocal Phocinae decision-engine MCP stdio server: fail-closed approval gate + classify/route/score.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- macOS MCP Server @deploymenttheory/macos-mcp-serverLocal macOS 27 desktop automation through MCP on Apple silicon.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Computer Use Turbo @afaaq-io/computer-use-turboLet any AI agent operate desktop apps on macOS, Windows and Linux, in the background and safely.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- agend-sh @agend-sh/agend-shPersistent Linux environments for AI agents, with interactive terminals and HTTPS previews.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
