- TAP @human/tapCredential isolation for AI agents: placeholder secrets, policy checks, optional human approval.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.12 GitHub stars.
- Cortex Gateway @wellknownmcp/cortex-gatewaySelf-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.12 GitHub stars.
- AIMEAT @aimeat/aimeatAIMEAT - the Linux of AI. An open, federated, self-hosted AI operating system you own. MIT.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.8 GitHub stars.
- Supabase SelfHosted @smithery/mistersandfr-supabase-mcp-selfhostedManage Supabase projects end to end across database, auth, storage, realtime, and migrations. Moni…9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.7 GitHub stars.
- MCP Gateway @panossalt/mcp-gatewayMulti-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.6 GitHub stars.
- Insumer @insumermodel/insumerWallet auth: send a wallet and conditions, get a signed boolean across 37 chains.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Raziel @tide-foundation/razielMCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- CorroborateMe @cnrcode/corroboratemeProve end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- Boat House @boathousecloud/boathouseDeploy and share small apps with team login, persistent data, versioned updates and domains.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- SealGate MCP Gateway @sealgate/gatewayMCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Auth Token Service @mikerawsonnz/auth-token-serviceHash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP.22% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Oakallow @oakallow/oakallowRuntime permission, approval, and audit layer for AI agent tool execution.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- AgentSIM MCP @agentsim/mcpControl plane for agent auth walls. Connector 0 handles SMS OTP with US test numbers.23% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting @4chems/platform-apiRemote MCP server for 4chems hosted IUCLID, CHESAR and QSAR Toolbox: onboarding, inquiries, admin.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- The Bridge @thebridge/bridgeHosted login, teams, billing and feature flags for your SaaS app, set up by your AI assistant.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Unkey MCP by usefulapi @usefulapi/unkeyManage API keys, identities, permissions, rate-limit overrides and verification analytics.Not assessed yet.A remote server; no sign-in.
- Kinde MCP by usefulapi @usefulapi/kindeUsers, organizations, roles, permissions, applications and feature flags.Not assessed yet.A remote server; no sign-in.
- FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs @fgac/fgacMultiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Proofable MCP @proofable/mcpContext and control for any AI. Agent identity, scoped access, and proof across tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Proof Holdings @proof/mcp-serverOne API, all things verified — control, delegation, human approval, anti-impersonation.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- MANDATE Credential Broker @projetnanocorp/mandateMCP server for mandates, delegation, policy-gated execution, credential grants, and audit.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.