- Alertlogic @rijul170/alertlogic-mcpMCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Falcon @rijul170/falcon-mcpCommunity extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- npx-vibe @devrajsinh-jhala/npx-vibeRead-only npm package and project dependency preflight tools for AI applications.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Datahogo @datahogo/datahogoScan a project for security issues locally with the open-source Data Hogo engine.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Purify Security Feeds @eason4kim-rocket/purify-feeds-mcpQuery CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Attestd @attestd-io/attestd-mcpCVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MCP Server Attestation @studiomeyer/server-attestationEd25519-signed MCP tool manifests + spawn attestation. Layer-2 supply-chain hardening.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Blackpoint Cyber @wyre-technology/blackpoint-mcpMCP server for Blackpoint Cyber MDR — alerts, threats, and operations.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- cve-cache @weiseer/cve-cacheRecent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AgentGuard — security checks for AI agents @shuaicongxiaomai/agentguardSecret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- MCP OpenClaw Extensions @romainsantoli-web/mcp-openclaw138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Dep @rog0x/depLicense check, outdated deps, security for AI agents7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Npm @rog0x/npmnpm package search, audit, bundle analysis for AI agents6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sentrik @maxgerhardson/sentrikGovernance runtime for AI-generated code. Enforce compliance and security standards.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mcpwatch @lazymac2x/mcpwatchAudit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Audit @joepangallo/mcp-audit-serverThin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Eleion Scanner @hernaninverso/eleion-scanner-mcpRegister/verify your domains, queue security scans, and read findings (CVE, severity).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Dep Oracle @ertugrulakben/dep-oraclePredictive dependency security engine. Trust scores, zombie detection, blast radius analysis.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Docker Release Information @dockersamples/mcp-docker-release-informationMCP server providing Docker Desktop release notes and security information.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Heimdall @caglarbozkurt/heimdallScan an MCP server or agent config for injection, exfiltration, and risky capabilities.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Freshdeps @solvohq/freshdeps-mcpLive npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Closeread Verify @freeguy-ai/closeread-verifyA verified dependency-audit verdict any AI agent can call over MCP, not a raw scan.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- TridentChain Security @devinder1/tridentchain-securityLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CISA Kev @csoai-org/cisa-kev-mcpCISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
