- Sourcebook @maroondlabs/sourcebookLive codebase intelligence for AI agents: conventions, blast radius, import graphs, git insights.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.3 GitHub stars.
- Bitbucket MCP Server @lawp09/bitbucket-mcpMCP server for Bitbucket API - manage repositories, pull requests, comments, pipelines and more6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Inkog @inkog-io/inkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Codex Bridge @hampsterx/codex-mcp-bridgeWraps Codex CLI as MCP tools: codex, review, query, search, structured, ping, listSessions.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Tripwire @aliboily/tripwireMCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- React Toolkit @nishant-chaudhary5338/mcp-react-toolkit9 MCP servers for React/TypeScript — dep auditing, a11y, test gen, and TypeScript enforcement.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Ollama Handoff @michael-whitecapdata/ollama-handoffOffload cheap work from your AI agent to a local Ollama model, at zero cloud cost.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- MegaLinter @downatthebottomofthemolehole/megalinterMCP server for running Ox Security MegaLinter via mega-linter-runner4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- NativeKeel @alicanakyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Harvey Tools @meltingpixelsai/harvey-toolsWeb scraping, code review, content generation, and analysis tools. Pay-per-call USDC.Not assessed yet.Runs on your machine, installed from npm.2 GitHub stars.
- Solumbe @bashbop/solumbeDeterministic local repository context, impact analysis, and merge-readiness evidence for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Codebase Chat @shinzarou-eng/codebase-chatLocal-first codebase intelligence: cited answers, audits, reports. EN/FR.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- abcop @adrianov/abcopABC complexity gate for AI-written code with an MCP inspection tool.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.2 GitHub stars.
- rrubocop @adrianov/rrubocopFast RuboCop-compatible Ruby linter with MCP inspect and autocorrect tools.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.2 GitHub stars.
- dbt-plan @presentjay/dbt-planPredicts the DDL a dbt change will execute, before you run it. Reads files, not the warehouse.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- siGit CLI @sigit/cliRun sigit.si locally: browse repos, search code, manage PRs, issues, and Cloud Sessions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.2 GitHub stars.
- Verdict QA @artjack/verdictRead-only MCP server over Verdict QA state: verdicts, findings, flaky quarantine, history.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- ViewDoctor @kamnevvladimir/viewdoctorLocal SwiftUI changed/staged checks with compact agent output and multi-module ownership.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.2 GitHub stars.
- MCP Code Review Server @goodjobwilliam/aicraft-code-reviewCode review as an MCP server — structured reviews with OWASP security scanning.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- StackGuide @taimiralain/stackguide-mcpDynamic context loading for AI assistants with TDD workflow and AST analysis6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Òtítọ́ @bashbop/otitoDeterministic local repository context, impact analysis, and merge-readiness evidence for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Codemore @abhinavteja123/codemoreThe static analyzer your AI agent reads — fix-ready, machine-readable scan reports over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Periphery Code Audit @zyntx-lab/periphery-mcp-serverSwift code analysis with Periphery - detect unused code and improve code quality3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.2 GitHub stars.
- PMD @roeiba/pmdMCP server for PMD static code analyzer - run code analysis and detect duplicates4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
