- Codex Tool @x51xxx/codex-mcp-toolMCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.24 GitHub stars.
- agent-tool @knewstimek/agent-toolEncoding-aware, indentation-smart file tools for AI coding agents with SSH, SFTP, and 20+ tools.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.24 GitHub stars.
- Call Me @callmemcp/call-meYour AI rings your iPhone, speaks its question, and gets your spoken answer back as text.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.22 GitHub stars.
- Hunch @prithviseran/hunchFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.22 GitHub stars.
- Claudebox @psyb0t/claudeboxSelf-hosted MCP server exposing Claude Code as an agentic AI tool over streamable HTTP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.22 GitHub stars.
- Remi @mattheworiordan/remiApple Reminders CLI and MCP server with section support and iCloud sync4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.22 GitHub stars.
- Agent Droid Bridge @neverlow512/agent-droid-bridgeMCP server giving AI agents eyes and hands inside Android devices via ADB13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.22 GitHub stars.
- Desktop Touch @harusame64/desktop-touch-mcpComputer-use MCP for Windows 10/11: 32 tools — screenshot, UIA, Chrome CDP, type/click/scroll, VBA.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.22 GitHub stars.
- Terminal MCP Server @aybelatchane/mcp-server-terminalMCP server for AI agents to interact with terminal applications. Think Playwright for terminals.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.21 GitHub stars.
- Xcode: MCP Bridge Wrapper for Cursor @soundblaster/xcode-mcpbridge-wrapperPython wrapper that makes Xcode's MCP bridge compatible with strict MCP clients like Cursor4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.20 GitHub stars.
- Bun Uia @obscuritysrl/bun-uiaPlaywright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.20 GitHub stars.
- hush @royashbrook/hushA secret store for AI agents: the agent never sees the plaintext.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.20 GitHub stars.
- KeyShot MCP @truman-t3/keyshot-mcpControl local KeyShot scenes, cameras, environments, and renders through headless scripting.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- pty-mcp @raychao-oao/pty-mcpInteractive PTY sessions over MCP: local shells, SSH, serial ports, and persistent remote sessions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.19 GitHub stars.
- DeepADB @fullread/deepadbFull-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- Clipboard History MCP @d-khomenko/clipboard-history-mcpYour clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.19 GitHub stars.
- Ironclaw @ironsecco/ironclawSandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.19 GitHub stars.
- Iconnect @heznpc/iconnectMCP server for the entire Apple ecosystem — 123 tools across 14 modules. macOS only.Not assessed yet.Runs on your machine, installed from npm.18 GitHub stars.
- glass @fixed-width/glassMCP server giving a coding agent a build→see→interact→debug loop over native GUI apps.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.18 GitHub stars.
- AirMCP @heznpc/airmcpGoverned MCP runtime for the Apple ecosystem, available on macOS with per-call approval.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Interactive Terminal @amol21p/interactive-terminalMCP server for real interactive terminal sessions — REPLs, SSH, databases, Docker5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Droidline @knifelemon/droidlineLet an AI agent see and use a real Android phone over Wi-Fi, without ADB or root.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.17 GitHub stars.
- Netwright @ricfanin/netwrightPlaywright-style automation of .NET desktop apps (WPF, WinForms, WinUI) for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.17 GitHub stars.
- WPF Visual Tree @faze79/wpf-visual-treeLet AI agents inspect and drive running WPF apps: tree, bindings, screenshots, clicks, text input.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.17 GitHub stars.
