- Sourcebook @maroondlabs/sourcebookLive codebase intelligence for AI agents: conventions, blast radius, import graphs, git insights.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.3 GitHub stars.
- Droste @lorismascio17/droste-memoryLocal code-memory graph for AI coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Bitbucket MCP Server @lawp09/bitbucket-mcpMCP server for Bitbucket API - manage repositories, pull requests, comments, pipelines and more6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Codex Bridge @hampsterx/codex-mcp-bridgeWraps Codex CLI as MCP tools: codex, review, query, search, structured, ping, listSessions.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- efficient GitLab @detailobsessed/efficient-gitlabToken-efficient GitLab MCP: 167 tools via 3 meta-tools, field projection, keyset pagination3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Daimonos @beardfaceguy/daimonosAgent-optimized MCP server with structured JSON tools. 20-45% token savings.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.3 GitHub stars.
- Big Indexer @ahmedxuhri/bigindexerArchitecture-aware MCP context with boundaries, seams, impact scope, and BGI-TWIN guidance.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Atlassian Dc Bitbucket @mrrefactoring/atlassian-dc-mcp-bitbucketMCP server for Atlassian Bitbucket Data Center - interact with repositories and code4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Limpet @ksym04/limpetPersistent engineering memory for AI coding agents. Survives refactors, knows when it is stale.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.3 GitHub stars.
- MegaLinter @downatthebottomofthemolehole/megalinterMCP server for running Ox Security MegaLinter via mega-linter-runner4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Codemunch Pro @bigjai/codemunch-proCode indexing MCP: 15 tools, 10 languages, hybrid search, call graphs, O(1) retrieval.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Vibe Hnindex @andyanh174/vibe-hnindexIndex source code into a local knowledge base, search with keyword + semantic + hybrid modes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- LiveCheck AI @qualityclouds/mcp-server-qualitycloudsSecure MCP runtime server for scanning and autofixing code issues7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
- briar @iklobato/briarLocal knowledge store built from GitHub, Jira, Linear and cloud history, served over MCP.Not assessed yet.Runs on your machine, installed from Docker.2 GitHub stars.
- go-tokenless @continuous-actions/go-tokenlessMove npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Tower @rohanxmalik/towerMultiplayer for AI coding agents: collision detection before the edit, messaging, delegation.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Solumbe @bashbop/solumbeDeterministic local repository context, impact analysis, and merge-readiness evidence for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- codemem @jeang42/codememShared memory for coding agents: projects, reusable code, sessions and commits across machines5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- bundlebox @blackswanalpha/bundleboxWhere the work is, packed before the agent reads: brief, symbol tables, findings, token bill.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- CGIS Code Graph @zaebee/codegraph-brainCode graph for AI agents: impact analysis and call tracing for Python and TypeScript.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Codebase Chat @shinzarou-eng/codebase-chatLocal-first codebase intelligence: cited answers, audits, reports. EN/FR.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Panel Review @truverif/panel-reviewGuardian agent for AI coding: four frontier models review risky diffs and commits before they ship.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.2 GitHub stars.
- True Memory Fragments @kyle641320/true-memory-fragmentsDetect stale source context and retain traceable code-chain understanding for AI coding agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- my-pi @boxboxmari/my-piLocal-first MCP runtime for coding agents with safe workspace access, AST/LSP navigation, and Git.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
