- GitLab @mmedum/gitlab-mcpGitLab over MCP from your own account: issues, merge requests, reviews, the repository and CI.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- RepoRipple @adiarora06/reporippleDeterministic repository change-impact analysis for engineers and coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Code Assistant @j0hanz/code-assistantGemini-powered MCP server for code analysis.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Diff @mukundakatta/diff-mcpCharacter-precise unified diff + patch application + patch parsing.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codna — repository intelligence @thyn-ai/codnaRepo intelligence: triage, fix PRs, SARIF reachability, recall. Free codna login to execute.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- ClawHub @maxz712/clawhubGit hosting for AI agents: repos, changes, focused diffs, reviews, issues, code search.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Checktrail @stsepelin/checktrailLocal code validation with explicit execution trust and evidence of what actually ran.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MegaLens @megalens/mcpCode review by AI models from different companies, usually two. Shows where they agree and disagree.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Secret Hygiene @mrfentmen/secret-hygiene-mcpCount secret-like patterns in bounded local files without returning values, keys, paths,...6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bouncer Gates @ajeermahmood/bouncer-gatesStops secrets, cross-tenant queries and unsafe migrations before they merge.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AETRE & The Governed Agent @grayclayton/aetre-mcpDecision-theoretic triage and fail-closed agent gating: 32 tools over stdio.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Sonar MCP Server @igorolv/sonar-mcp-serverRead-only SonarQube Community Build access for AI agents: issues, hotspots, rules, code snippets4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- DevOps & Cloud Code Auditor @ansarii/devops-code-auditorDetects database migration table locks, terraform cost leaks, and OWASP API flaws.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Titan Frameworks (LangChain, LlamaIndex, Ollama, XRPL) @bebopp187-stack/titan-frameworksReview and rewrite LangChain, LlamaIndex, Ollama, and XRPL code against current APIs.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AGZ Rust MCP @ugur-murat-alt/agz-rust-mcpBounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Django Chainsaw @syrian963/django-chainsaw-mcpFinds what will hurt in a Django project: cascades, N+1, unsafe migrations, tenant leaks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- nittim @nittim/nittimProduction-safety audits for AI-generated code, with a fix for every finding.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Weavatrix Quality @weavatrix/weavatrix-qualityRevision-bound quality planning, execution, evidence, proof, and Playwright authoring.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AGZ Rust Coder @ugur-murat-alt/agz-rust-coderBounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Koda @aabxtract/kodaVerification and memory layer for coding-agent workflows.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bitbucket @droplinkperformance/bitbucket-mcp-serverProvider-agnostic, AI-review-first MCP server for Bitbucket Cloud.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Subagent MCP @thang1710/subagent-mcpLet Codex orchestrate external coding agents through their native harnesses.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Moltline Code Review @moltlinestudio/codereviewRisk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Grok Build @nuruvala/grok-build-mcp-serverRun the Grok Build CLI as MCP tools: agent runs with live progress, code review, web research.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
