- Azure DevOps On-Premises @zwitbaum/mcp-devops-on-premMCP server for on-premises Azure DevOps Server and TFS: repos, pull requests, work items, and wiki.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Veto @jigyasudham/veto93 agentic MCP tools + 49 specialist agents for every major AI CLI. Self-learning, no API keys.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Projscan @abhiyoheswaran1/projscanAgent-first MCP. 11 AST adapters, 12 named languages, 51 tools, mission outcomes. Local.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Smart Context @arrayo/smart-context-mcpReduces AI agent token usage by 90% via context compression and task checkpoint persistence.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Korext: AI Code Governance @korext/governanceGovernance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
- AdversaryGate @sanflow10/adversary-gateFail-closed merge gate an agent calls before saying done: MERGE, BLOCK or INCONCLUSIVE.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Celmis @constantinemakoid/celmisSelf-hosted code intelligence: cross-repo Q&A, dependency audits and PR review, over MCP5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
- specmate @alele496/bsv-specmateBSV coding knowledge engine for AI agents — pre-compile traps and post-compile diagnosis.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- ovecc @ovecc-labs/oveccArchitecture guardrails for AI-written code: dependency graph, impact, dead code, CI gate2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Overllm @theadamdanielsson/overllmFind the LLM/AI calls you didn't need — where plain code or a regex does the job. No model.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Code Sentinel @salrad22/code-sentinelCode quality analysis MCP server - detects security issues, deceptive patterns, and placeholders6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Sourcebook @maroondlabs/sourcebookLive codebase intelligence for AI agents: conventions, blast radius, import graphs, git insights.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.3 GitHub stars.
- Bitbucket MCP Server @lawp09/bitbucket-mcpMCP server for Bitbucket API - manage repositories, pull requests, comments, pipelines and more6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Inkog @inkog-io/inkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Codex Bridge @hampsterx/codex-mcp-bridgeWraps Codex CLI as MCP tools: codex, review, query, search, structured, ping, listSessions.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Tripwire @aliboily/tripwireMCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- React Toolkit @nishant-chaudhary5338/mcp-react-toolkit9 MCP servers for React/TypeScript — dep auditing, a11y, test gen, and TypeScript enforcement.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Ollama Handoff @michael-whitecapdata/ollama-handoffOffload cheap work from your AI agent to a local Ollama model, at zero cloud cost.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- MegaLinter @downatthebottomofthemolehole/megalinterMCP server for running Ox Security MegaLinter via mega-linter-runner4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- ALM X++ MCP Server @alimbenhelal-pro/alm-xpp-mcpD365 F&O: 90 AI tools over 200K+ objects, 25M+ cross-refs, 24M+ label translations.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
- LiveCheck AI @qualityclouds/mcp-server-qualitycloudsSecure MCP runtime server for scanning and autofixing code issues7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
- NativeKeel @alicanakyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Harvey Tools @meltingpixelsai/harvey-toolsWeb scraping, code review, content generation, and analysis tools. Pay-per-call USDC.Not assessed yet.Runs on your machine, installed from npm.2 GitHub stars.
- Solumbe @bashbop/solumbeDeterministic local repository context, impact analysis, and merge-readiness evidence for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
