- Black Duck Security Scanner @blackduck/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Kawa Code @kawacode/mcpTeam-aware memory: intent, decisions, real-time conflicts for AI coding assistants.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- GateTest @gatetest/gatetest120-module QA gate. Give Claude eyes (screenshots), ears (Sentry errors), and hands (verify fixes).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Connections @lunarwerx/connectionsAWS, GitHub and connected services from your agent, no keys to paste, plus local shell and browser.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Regulatory Signals @rikocr8orh8/regulatory-signalsAudit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Dig @nakishiyaman/digMCP server for code archaeology: git blame, file history, contributors, and co-change analysis3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- SpikeMe @isaacviannadev/spikemeAnalyze your repo's stack and generate grounded, time-boxed spike decision docs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codeaudit @infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Git @infoinlet-marketplace/mcp-gitRead-only Git inspection for AI agents — log, show, diff, status, blame, grep. No writes.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Pushci @finsavvyai/pushciAI-native zero-config CI/CD. 19 languages, 40+ frameworks. Free forever.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Git Archaeologist @engrmaziz/git-archaeologistTrace code history, commit reasoning, and PR context directly from Git logs.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sl @donovan-jasper/sl-mcpMCP server for Sapling (sl) version control4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sphior Code @toraastrta/sphior-code-mcpDeterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Reposcout @rakesh1002/reposcoutDiscover, enrich, and rank GitHub repos for an objective with weighted, evidence-based scoring.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vaspera Hardening @rcolkitt/vaspera-hardeningEnterprise certification for codebases with multi-agent security, reliability, and quality audits7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- GitHub Inside Claude Code @kirchlive/github-inside-claude-codeNormalized GitHub-CLI bridge for Claude Code — 89 ops, 6 families incl. federation sources7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Project Brain @gentleelephant/project-brainRead-only source search and retrieval across configured GitHub repositories5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Ybe Check @addycuber/ybe-checkYbe Check – security and compliance orchestrator for AI-generated repositories.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Deepcontext @wild-card/deepcontextAdvanced codebase indexing and semantic search MCP server7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- SandboxAPIs @sandboxapis/mcpDrop-in read-only replicas of GitHub, Jira, Slack and 18 more, preloaded with one fake company.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- harmony-mcp @abduljabbarbxr/harmony-mcpRepo rules enforcement for AI agents. Checks diffs against repo conventions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- PreviewDrop @previewdrop/cliDeploy any Git branch to a live HTTPS preview URL from your agent. No Dockerfile required.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Dsh Codebase Chat @shinzarou-eng/dsh-codebase-chatLocal-first codebase intelligence: cited answers, audits, reports. EN/FR.Not assessed yet.Runs on your machine, installed from npm.
- graphy @omnislash157/graphyosCompile any codebase into a walkable graph and serve it over MCP. No model decides an edge.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
