- GitHub @aifity/omnigit-mcpConnect AI assistants to GitHub - manage repos, issues, PRs, workflows, and git operations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- AgentLoopKit @abhiyoheswaran1/agentloopkitRead-only MCP server for AgentLoopKit tasks, policies, reports, handoffs, and status.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Code Index @achreftlili/code-indexSQLite-backed hybrid (vector + FTS) code search index for Claude Code over MCP.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Wisegit @sandip124/wisegitExtracts decision intent from git history and protects intentional code from AI modification.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- VibeScan @aguantar/vibescan-mcp-serverMCP server for VibeScan — scan projects for leaked secrets and security issues5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- semhood @ahmeedgamil/semhoodAST-based semantic code search; results ship with their call graph (calls + callers).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- ProofSlip @proofslip/mcp-serverReceipt-based verification for AI agent workflows — create, verify, and poll ephemeral proof objects5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- CompareGraph @massrelay-ai/comparegraphCompare cloned repositories against taxonomy packs: one code graph, cited claims, a matrix. Local.Not assessed yet.Runs on your machine, installed from a package registry.
- Tewip @hmamut39/tewipProves software work: triages failing tests, checks whether a test can fail, and reads migrations.Not assessed yet.Runs on your machine, installed from npm.
- Spawner @flosk6/spawnerPreview environments on your self-hosted Spawner server: a copy of your app for each git branch3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Local Workspace @peter4leadson/local-workspace-mcpBounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.Not assessed yet.Runs on your machine, installed from npm.
- Dunstan @barglabs/dunstanChecks a coding agent's handback against the pull request's GitHub record. No model decides.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ChangeAtlas @robyroro/mcp-changeatlasLocal Git change impact and related test discovery with inspectable import pathsNot assessed yet.Runs on your machine, installed from PyPI.
- GitHub (read-only) @abdulmuhaiminkhan/github-mcpRead-only GitHub repos, issues, PRs and commits, with tool descriptions tuned on a benchmark.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- SnapDoczilla @julvc/snapdoczillaOffline docs-as-code for any backend and frontend: a MkDocs site in your repo, by your AI agent.Not assessed yet.Runs on your machine, installed from PyPI.
- Session Relay @dimitrihilverda/claude-session-relaySelf-hosted relay: agent sessions on different machines share a board, chat and check git conflicts3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Keyspoor @majiayu000/keyspoorOffline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.Not assessed yet.Runs on your machine, installed from npm.
- Hivemind @leonhest/hivemindA shared, live plan for teams of coding agents, synced through your git remote.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Pasr @apheironn/pasrLocal, token-budgeted code context with file:line provenance and selection receipts.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Git Why @alliecatowo/git-whyFinds the Git commits that explain why code is the way it is: semantic and full-text history search.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- IAF Agent Bridge @francescoveryra-dot/iaf-agent-bridgeMCP server that sends work to Cursor Agent over ACP and returns the session id needed to continue.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ddflow @delian/ddflow-mcpWork-queue kernel for AI coding agents: dependencies, worktree isolation, quality gates, recovery3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Seshat @papyruslabs/seshat-mcpStructural code intelligence for AI agents: real call graphs, blast radius, and change history.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Guard @codapult/guardLocal-first architecture guardrails and project context for JS/TS AI coding agents.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
