- Ucn @mleoca/ucnAuditable, conserved AST code intelligence for AI agents. JS/TS, Python, Go, Rust, Java, C/C++, C#.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- dotrepo @maxwellsantoro/dotrepoTrust-aware repository facts for agents: build, test, docs, license, and security, no scraping.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Lema @lemahq/lema-mcpCited 'why was this decided?' answers for your repo and for React, Kubernetes, and Rust.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Coverctl @klarlabs-studio/coverctlGo code coverage analysis tool with MCP server for AI-powered coverage workflows4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Project Memory @kaaustubh/project-memory-mcpPersistent memory for AI coding agents — past bugs, decisions, and your corrections, in your repo.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Secrets Audit @eltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Git Enhanced @davidweb3-ctrl/git-enhancedEnhanced Git MCP Server - Code review, commit analysis, and branch management5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Verified Repo Memory @cognitivemyriad/verified-repo-memoryStale-proof repository memory with citations + just-in-time verification + TTL (repo-scoped).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- commit-check MCP @commit-check/commit-check-mcpCommit policy as code for AI agents: check commit messages, branch names and authors before a push3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Audit @commitshow/auditScore a public GitHub repo 0-100, or search Legit.Show for launched software by what we measured.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Devflow @cocaxcode/devflow-mcpMCP server connecting Jira (Cloud + Server) with GitHub/GitLab. Branches, issues, PRs, flows.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GitHub @aifity/omnigit-mcpConnect AI assistants to GitHub - manage repos, issues, PRs, workflows, and git operations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- AgentLoopKit @abhiyoheswaran1/agentloopkitRead-only MCP server for AgentLoopKit tasks, policies, reports, handoffs, and status.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Code Index @achreftlili/code-indexSQLite-backed hybrid (vector + FTS) code search index for Claude Code over MCP.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Wisegit @sandip124/wisegitExtracts decision intent from git history and protects intentional code from AI modification.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- VibeScan @aguantar/vibescan-mcp-serverMCP server for VibeScan — scan projects for leaked secrets and security issues5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- semhood @ahmeedgamil/semhoodAST-based semantic code search; results ship with their call graph (calls + callers).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- ProofSlip @proofslip/mcp-serverReceipt-based verification for AI agent workflows — create, verify, and poll ephemeral proof objects5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- GitHub Repo Intelligence @digitalgremlin/github-repo-intelligence-mcpGitHub repo maintainability verdicts—maintained, slowing, at-risk, abandoned—via MCP.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- Gitlab Public @pipeworx-io/gitlab-publicGitLab Public MCP — wraps the GitLab REST API v4 (public endpoints, no auth)6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Coderegistry @hellosg/coderegistryEnterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- SHIP @letsship/shipAssign Linear, Jira or GitHub issues to an AI coding agent team that plans, builds, reviews, tests.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Tewip @hmamut39/tewipProves software work: triages failing tests, checks whether a test can fail, and reads migrations.Not assessed yet.Runs on your machine, installed from npm.
- Spawner @flosk6/spawnerPreview environments on your self-hosted Spawner server: a copy of your app for each git branch3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
