- Identity AIops @aiops-tools/identity-aiopsGoverned Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- HODLXXI Read-Only @hodlxxi/hodlxxi-readonlyPublic read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Tctc @kofujimura/tctc-mcpERC-7303 token-controlled roles for AI agents: grant, check, and revoke permissions on-chain5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Google Workspace Admin Security-Audit MCP @shigechika/gwsadm-mcpMCP server for Google Workspace security auditing — login audit, external sharing, daily brief6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- L402 Gate @zekebuilds-lab/mcp-l402-gateL402 Lightning paywall + DoI score gate for MCP tools: challenge, verify, score.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Switchboard @wkoverfield/switchboardOne firewall and password manager for all your AI coding agents' MCP servers and secrets.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gateway @titus-civic/mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Vibelogin @snrniranjan/vibelogin-mcpAdd authentication to your app without leaving your IDE.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Smartpolicy @smartpolicy-protocol/smartpolicyRuntime authorization for AI agents and smart contracts via an immutable on-chain policy registry6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gateway @bolyra/gatewayMCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Google Workspace @aringad/google-workspace-mcpGoogle Workspace Admin via MCP. Manage users, groups, aliases, org units.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Agent Policy Enforcement @csoai-org/agent-policy-enforcement-mcpPer-agent-pair IAM for A2A. Define policies ('orchestrator may call billing only when amount<100...12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- EUDI Wallet @csoai-org/eudi-wallet-mcpEUDI Wallet MCP — EU Digital Identity Wallet under eIDAS 2.0 for AI agent authentication via14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Zeroidagent @clauxel/zeroidagent-mcpA paid remote MCP for ZeroID, built to return verdicts, receipts, usage logs, and audit-ready JSON.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- SuperDB @superdb/mcpBackend brasileiro (Postgres, login, storage): a IA cria tabelas, liga RLS e roda SQL no projeto.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Access Review Checklist @wxt-ai/workspace-access-checklist-workbenchCreate an access review checklist.Not assessed yet.A remote server; no sign-in.
- Cloud @skkkadoosh/cloudShare the app you built with AI privately: one sign-in link, remove anyone at once.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Gatana @gatana/gatewayMCP gateway for every MCP server, OpenAPI spec and FaaS tool behind one URL: SSO, SCIM, audit logs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Audit AI @audit0/auditai-mcpFinds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Intended @intended-so/intendedIntended's authority layer as MCP tools: ALLOW/ESCALATE/DENY decisions with signed tokens.Not assessed yet.Runs on your machine, installed from npm.
- autobus — signed attestations for agents, $0.01 per call @ninefiveonefive/autobusSigned attestations for agents, $0.01/call via x402: URL witness, AI permission, tx finality, JWKS.Not assessed yet.A remote server; no sign-in.
- Orchard — Agentic Cloud Backend @nicha404/orchardManaged database, auth, file storage, email, analytics, and deployment for coding agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ZP Nexus @sistemasinovadores/zp-nexusSuas IAs nos computadores e projetos da empresa, com permissões, aprovações e auditoria.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Drawbridge @xorfox/serverIdentity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
