- CALM @eilodon/calm-mcpMCP server giving coding agents a call-graph-aware, hash-verified view of a codebase, not grep.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- CodeWiki MCP — AI-generated docs for GitHub repos @izzzzzi/codewiki-mcpMCP server for codewiki.google: search repos, fetch wiki docs, ask questions6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- GraphPilot @graphpilot-oss/graphpilotStructural memory for coding agents: callers, callees, blast radius and symbols over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- Oss Autopilot @costajohnt/oss-autopilotOpen source contribution manager with PR tracking, issue discovery, and CI diagnosis4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
- NexusMem @yaminbkk/nexusmemLocal-first memory for AI coding agents: shell history with exit codes, git diffs, docs, MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Docdex @bekirdag/docdexFast per-repo documentation indexer and full-text search MCP server for codebases.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Myc @aistastudio/mycTask queue, decisions and memory for coding agents. Local SQLite, no network. Requires Bun.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Girder @dhishwasher/girderSaves AI coding-agent context by giving exact code instead of whole files, from a local graph.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Orbit @constellation-works/orbitOrbit's local-first task and workflow registry for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Koragraph @koragraph/koragraphLocal multi-repo code graph over MCP. Blast radius, call graphs, and memory anchored to code.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- OctoCounts MCP Server @huanglizhuo/octocounts-mcpAnalyze and compare public GitHub repo line counts (SLOC) via OctoCounts, from any MCP client.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Bomly @bomly-dev/bomly-cliGive your coding agent the dependency graph it is about to change: scan, diff, explain, audit3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Sourcegraph MCP Server @sourcegraph/mcpSourcegraph code search, semantic search, go-to-definition, find-references, and diff search.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.14 GitHub stars.
- CogniRepo @ashlesh-t/cognirepoFAISS, call graph, AST, BM25 — 34 MCP tools for AI agents. 50-80% token reduction. Offline.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.14 GitHub stars.
- Mergewarden @sjh9714/mergewardenCheck whether a coding agent's changes stayed inside the scope it was given.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
- Agent Memory @xchucx/agent-memoryGit-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
- Locus @sylphxai/locusLocus — the exact code chunk for the job: local BM25 search for agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- Memex @stifler7/memexTemporal engineering context for agents via MCP.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- Codeweaver @knitli/codeweaverSemantic code search built for AI agents. Hybrid, AST-aware, context for 166 languages.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.12 GitHub stars.
- Miru @takara/miruHybrid semantic and keyword code search for coding agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- ContextOS — Powered Exoskeleton for AI Coding @yubinbin32-ops/contextosContext exoskeleton for AI development: reduce token usage and context occupancy.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- Hunch @davesheffer/hunchShared records for AI agents: engineering decisions, bug history, rules, and work state through MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- coldstart @akashgoenka/coldstartCodebase memory for AI agents: an AST index plus agent-written notes that self-stale.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Vulnicheck @andrasfe/vulnicheckHTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
