- AgentEnvelope @blackboxengineering/agent-envelope-mcpNeutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Grantd @rafavecchi/grantdGrantd MCP server: let your AI agent act on a user's behalf across third-party APIs via OAuth.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- LiveAuth @dulzuradev/liveauth-mcpMCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Attest @chudah1/attest-mcpCredential enforcement middleware for MCP servers — verifies scoped tokens on every tool call4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- FusionAuth MCP @fusionauth/mcp-apiPreview release of FusionAuth API MCP server4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Qdrant RBAC @fidonis/qdrant-mcp-rbacRole-based access to your Qdrant vector store, via MCP. OIDC in, scoped JWTs out.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Logto @mrfentmen/logto-mcpMCP server for Logto: users, applications. Works with Cloud or self-hosted.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CyberArk @mrfentmen/cyberark-mcpCyberArk PVWA API: safes and accounts.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bolyra MCP @bolyra/mcpMCP auth middleware: gate tool calls so only authorized agents can act.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gateway @authzx/mcp-gatewayAuthzX MCP Gateway — policy-enforcing proxy between AI agents and MCP servers9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sovereign Identity Wallet @tamtunnel/si-wallet-mcpSelf-hosted signing wallet: DIDs, agency grants, and task mandates for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CyberQP @wyre-ai/cyberqp-mcpMCP server for CyberQP's privileged access management API.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- entraadm MCP @shigechika/entraadm-mcpMCP server for Microsoft Entra ID sign-in and audit-log triage (read-only)5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Governed Gateway @icohangar-ops/governed-mcp-gatewayHTTP MCP gateway: principal on tools/call + SSE, allowlists, vault rotate, CHP gates.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MCP Server Auth Template @brunovicco/mcp-server-auth-templateOAuth 2.1/OIDC resource-server reference for secure MCP authorization3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- gws-admin-mcp @antct11/gws-admin-mcpSafe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Logi @1pass/logilogi (1pass) IdP — manage your OAuth apps, redirect URIs, passkeys, login history and docs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gateco @gateco/gatecoPermission-aware retrieval for AI systems: policy-enforced access to organizational knowledge.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Identity AIops @aiops-tools/identity-aiopsGoverned Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Tctc @kofujimura/tctc-mcpERC-7303 token-controlled roles for AI agents: grant, check, and revoke permissions on-chain5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Google Workspace Admin Security-Audit MCP @shigechika/gwsadm-mcpMCP server for Google Workspace security auditing — login audit, external sharing, daily brief6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- L402 Gate @zekebuilds-lab/mcp-l402-gateL402 Lightning paywall + DoI score gate for MCP tools: challenge, verify, score.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Switchboard @wkoverfield/switchboardOne firewall and password manager for all your AI coding agents' MCP servers and secrets.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vibelogin @snrniranjan/vibelogin-mcpAdd authentication to your app without leaving your IDE.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
