- Sqlike @orifisher2/sqlike-mcpLints SQL and checks rewrites return the same rows. Postgres, MySQL, MariaDB, SQLite, MSSQL, DuckDB4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- GitLab @vish288/mcp-gitlabGitLab MCP server for MCP 2026-07-28: projects, MRs, files, reviews, pipelines, CI/CD, issues5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- FedRAMP 20x Requirements @kevinrabun/fedramp20xmcpAn MCP server that provides access to FedRAMP 20x security requirements and controls.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- Diffgate @srbsa/diffgateDeterministic guardrail your coding agent runs on itself: diff-scoped findings, zero LLM tokens.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Coding Standards @corbat-tech/coding-standardsAI coding standards that enforce production-grade code with DDD, SOLID, TDD guardrails.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- DiffPilot @bkalafat/diffpilotMCP server for PR code review, commit messages, changelogs, and secret detection.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.5 GitHub stars.
- SFMC @joernberkefeld/mcp-server-sfmcSFMC AMPscript/SSJS/GTL tools + searchable help for 7 MC products (Engagement, Pardot…) via MCP.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- nomArmy @rayson-tech/nomarmySandboxed coding workers, verified: tests rerun fresh and must fail with the change reverted.Not assessed yet.Runs on your machine, installed from npm.4 GitHub stars.
- Flyto Indexer @flytohub/flyto-indexerCode intelligence MCP server — impact analysis, semantic search, dependency graphs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Weavatrix @weavatrix/weavatrixNative Weavatrix MCP: 67 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- ReviewGuard @eclipsesource/review-guardSafety boundary for agent written GitHub PR reviews: pending and invisible, submitting is opt-in3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Tenant Isolation @subodhkc/mcp-tenant-isolationStatic analysis scanner for MCP server code and multi-tenant SaaS applications.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- ABAPilot @nicohern/abapilot-mcpABAP MCP connector for SAP ECC and on-premise S/4HANA. Requires a licensed ABAPilot backend.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Hivelore @doucs91/hiveloreDeterministic gate: blocks any commit whose diff reintroduces a documented team mistake.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Azure DevOps On-Premises @zwitbaum/mcp-devops-on-premMCP server for on-premises Azure DevOps Server and TFS: repos, pull requests, work items, and wiki.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Veto @jigyasudham/veto93 agentic MCP tools + 49 specialist agents for every major AI CLI. Self-learning, no API keys.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Projscan @abhiyoheswaran1/projscanAgent-first MCP. 11 AST adapters, 12 named languages, 51 tools, mission outcomes. Local.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Smart Context @arrayo/smart-context-mcpReduces AI agent token usage by 90% via context compression and task checkpoint persistence.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- AdversaryGate @sanflow10/adversary-gateFail-closed merge gate an agent calls before saying done: MERGE, BLOCK or INCONCLUSIVE.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Celmis @constantinemakoid/celmisSelf-hosted code intelligence: cross-repo Q&A, dependency audits and PR review, over MCP5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
- specmate @alele496/bsv-specmateBSV coding knowledge engine for AI agents — pre-compile traps and post-compile diagnosis.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- ovecc @ovecc-labs/oveccArchitecture guardrails for AI-written code: dependency graph, impact, dead code, CI gate2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Overllm @theadamdanielsson/overllmFind the LLM/AI calls you didn't need — where plain code or a regex does the job. No model.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Code Sentinel @salrad22/code-sentinelCode quality analysis MCP server - detects security issues, deceptive patterns, and placeholders6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
