- Heliograph @heliograph-io/heliographRun commands on a machine you cannot SSH into. Air-gapped, bastion-only, change-controlled.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mac Control @dockndevai/mcp-mac-controlFull macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- VibeView @vibeview/vibeviewDrive cloud iOS, Android, Apple TV, Android TV and Roku devices to verify app changes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Capsulate @capsulatedev/capsulateReal Linux and Windows desktop VMs for AI agents: exec, files, computer-use and snapshots via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- IsolatedTester — TinkyVision system @agewellepm/isolated-testerIsolated macOS app tests, MCP images, OCR/ASCII frames, accessibility and evidence reports.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Macos @dockndevai/mcp-macosObserve & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- sift @slymnysr/siftRuns a command, keeps every byte on disk, returns only the lines that matter8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- OpsMaxx @opsmaxx/opsmaxxSSH, files, containers and databases via the OpsMaxx desktop app - scoped per capability, audited.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- OmniDebugLink @omnidebuglink/omnidebuglinkremote debug iOS/Android/Unity/Godot/Flutter/RN/Web on real-device.ui-tree/screenshots/taps,tests.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- sudo-proxy @tarides/sudo-proxyPrivileged command execution proxy with human approval via pkexec or sudo9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- simframe @lvlrsajjad/simframeAlways-warm iOS Simulator and Android emulator frames: agents read the screen in ~20ms7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- agentguard @agentwares/agentguardMCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Rentctl @michael-drake/rentctlLeased dev environments — every server dies when its AI session ends.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Phosphor @kirusshenkin/phosphorHosts, metrics, Docker and authorized_keys over a macOS terminal's live SSH connections7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Melaya @melaya/melayaCreate and run any AI agents systems from 6k+ tools. Give your AI hands access to your Android.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Unofficial Apple Music for macOS @jaminben/secure-applemusic-mcp-for-osxAsk for a playlist. Get a real one, playing in Apple Music — no account, nothing stored.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Quickshell MCP @franklinnolasco7/quickshell-mcpSource-grounded Quickshell, QML, and Qt documentation, examples, and real-world implementations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- 2native SSH MCP Server @daidaij/2native-ssh-mcpSSH-based MCP server for remote command execution and file transfer. Credentials stay local.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Limrun @limrun/mcpCloud iOS simulators and Android emulators your agent can create, drive, and throw away.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- doublespeed — Xcode as an API @doublespeed/mcpBuild, test and run iOS apps on a remote Mac from any machine. XcodeBuildMCP-compatible tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Prefab @prefabapp/prefabList, create and deploy your Prefab project templates from any MCP agent.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Obsidian CLI MCP @dariuscorvus/obsidian-cli-mcpLocal MCP server for Obsidian Desktop via the official Obsidian CLI.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Charles Local MCP @eason0in/charles-local-mcpGuarded local Charles Proxy automation and bounded XML session evidence8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Sandbox as a Service @sandbox-as-a-service/mcpGive an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
