- Flyto Indexer @flytohub/flyto-indexerCode intelligence MCP server — impact analysis, semantic search, dependency graphs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Tirith @eabz/tirithCoordination server for parallel coding agents: claims, contracts, notices, and memory notes.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.4 GitHub stars.
- Jarvis @phuongddx/jarvisLocal-first SCIP code navigation and Zoekt search over your own indexed repositories4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Sonde @anishmoncivarghese/sondeLocal code graph for TypeScript, Python and Swift: who calls this, what breaks if I change it.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Weavatrix @weavatrix/weavatrixNative Weavatrix MCP: 67 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- ReviewGuard @eclipsesource/review-guardSafety boundary for agent written GitHub PR reviews: pending and invisible, submitting is opt-in3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Jules Dispatch @yuuqq/jules-dispatchBatch-dispatch coding tasks to Google Jules: 50 parallel sessions, plan approval, PR collection.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Lossless Context @northtekdevs/lossless-context-mcpAgent context flight recorder: restore after compaction, fan-out packs, signed git-bound receipts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Codeintel @phuongddx/codeintelLocal-first SCIP code navigation and Zoekt search over your own indexed repositories4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Mergetrain @yongjip/mergetrainQueue parallel-agent worktree branches, test together, serialize and recover Git pushes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Misterdev @dcondrey/misterdevAutonomous LLM build orchestrator that plans, edits, and verifies code across languages.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Hivelore @doucs91/hiveloreDeterministic gate: blocks any commit whose diff reintroduces a documented team mistake.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Azure DevOps On-Premises @zwitbaum/mcp-devops-on-premMCP server for on-premises Azure DevOps Server and TFS: repos, pull requests, work items, and wiki.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Oxcode @snowmead/oxcodePageRank-curated code intelligence for coding agents over an indexed source repository.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Plumb @plumbkit/plumbLSP-backed IDE intelligence plus concurrency-safe, transactional edits for AI coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.4 GitHub stars.
- Rebar @navapbc/rebarEvent-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Tierward @marcoguillermaz/tierwardRead a Tierward project's governance state (doctor, team-settings, arch-audit, skills) over MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Agence @l-agence/agenceAI governance MCP server — policy enforcement, skills, memory, multi-LLM consensus6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Capsule @dawitlabs/capsuleCompact, source-linked context packs that reduce token waste for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Cartograph @anthony-maio/cartographRepo analysis for coding agents with ranked files, dependency maps, and task-scoped context.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Projscan @abhiyoheswaran1/projscanAgent-first MCP. 11 AST adapters, 12 named languages, 51 tools, mission outcomes. Local.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- SAST MCP Server @skyrxin/sast-mcp-server11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Hindsight MCP @rbfinch/hindsight-mcpMCP server for AI-assisted coding with development history: git, tests, Copilot.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.4 GitHub stars.
- Fossick @lipdog/fossickSearch all of GitHub from your AI agent — find libraries, drill into repos, find code patterns.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
