- replicant-mcp @thecombatwombat/replicant-mcpAndroid MCP server for AI-assisted development. Build, test, emulate, and automate.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- Weapp Agent @chaixueyuan/weapp-agent-mcpAgent-first MCP server for WeChat Mini Program debugging & automation via WeChat DevTools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- Claude KVM @aras-workspace/claude-kvmMCP server — control remote desktops via VNC with a native Swift daemon and Apple Vision OCR8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- Plonk @ostapondo/plonkPlonk gives agents local macOS tools for windows, workspaces, screenshots, OCR, and more.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- LLM CLI Gateway @verivus-oss/llm-cli-gatewayOne MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- Proxmox @antonio-mello-ai/mcp-proxmoxManage Proxmox VE clusters through AI assistants — VMs, containers, and more5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
- Octofs @muvon/octofsStandalone MCP filesystem tools server — view, edit, shell, workdir.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.16 GitHub stars.
- mac-control-mcp @adelelo13/mac-control-mcpNative Swift macOS automation — 153 tools: AX, EventKit, voice, browser DOM, undo.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.16 GitHub stars.
- FiveM MCP @ziyacivan/fivem-mcpBuild, run and live-test FiveM servers with AI agents: RCON, DevCon, window control, mcpb bridge.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- SysKnife @lacs-project/sysknifeAdministers Linux via typed, approval-gated actions with an Ed25519-signed audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.15 GitHub stars.
- s-gw @sgateway/s-gwKeep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Ntobjmanager @lupingqaq/ntobjmanager-mcpStateful Windows RPC attack-surface research for AI agents: 22 tools on NtObjectManager.Not assessed yet.Runs on your machine, installed from a package registry.14 GitHub stars.
- Mac Shortcuts — read your Mac from any agent @dominic-dk/mac-shortcuts-mcpRead your Mac's Calendar, Reminders, Notes, Contacts and more via Shortcuts. Read-only, local.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Munim Computer Use @munimtechnologies/munim-computer-useAccessibility-first desktop control for any agent: background input, agent pointer, zoom, Chrome.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Orbit @constellation-works/orbitOrbit's local-first task and workflow registry for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- WinDbg @glslang/windbg-mcpWinDbg/DbgEng over MCP: crash dumps, live user & kernel, driver IOCTLs, and TTD.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.14 GitHub stars.
- Antrieb — Instant Clusters and Networks for AI Agents @antrieb/antriebValidates AI infra code on real VMs. Self-corrects until it works. No containers, no sandboxes.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.14 GitHub stars.
- Unterm @zhitongblog/untermThe terminal AI agents can drive: spawn panes, run commands, read screens, scrolling screenshots.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.14 GitHub stars.
- Android @us-all/androidAndroid MCP — ADB-based device, apps, UI, logcat, emulator, files, system, debug7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- ProPresenter @alxpark/propresenter-mcpProPresenter 7 MCP server5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Automox MCP Server @automox/automox-mcpOfficial MCP server for Automox. Manage devices, patches, and policies in natural language.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.14 GitHub stars.
- Pointframe MCP Server @dimitar-radenkov/pointframe-mcpWindows screenshots, OCR, and redacted screen recording for AI agents. No desktop app needed.Not assessed yet.Runs on your machine, installed from MCPB.13 GitHub stars.
- Async Parallel Antigravity for Codex & Claude Code @varadfromeast/codex-agy-bridgeRun parallel, resumable, human-operable Antigravity CLI sessions from any MCP agent harness7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.13 GitHub stars.
- Glovebox @segentic-lab/glovebox-mcpSandboxed computer-use for AI agents: drive real browser + desktop apps in nested X11 windows6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.13 GitHub stars.
