- Connections @lunarwerx/connectionsAWS, GitHub and connected services from your agent, no keys to paste, plus local shell and browser.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Silent Door Repository Handoff Planner @aibitious/repository-safety-preflightChoose files for an agent handoff using filename decisions. No file contents or credentials.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- gently @gently/knowledge-graphAsk a codebase what calls what: search, blast radius, paths between symbols, and diffs.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CodeMouse @squidcode/codemouseRead-only access to your CodeMouse accounts, repositories, and AI pull-request reviews.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Regulatory Signals @rikocr8orh8/regulatory-signalsAudit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Dig @nakishiyaman/digMCP server for code archaeology: git blame, file history, contributors, and co-change analysis3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MAJR Dispatch @majrdotapp/dispatchTurn a raw dev log (commit subjects, PR titles) into customer-facing release notes Markdown.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- SpikeMe @isaacviannadev/spikemeAnalyze your repo's stack and generate grounded, time-boxed spike decision docs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codeaudit @infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Git @infoinlet-marketplace/mcp-gitRead-only Git inspection for AI agents — log, show, diff, status, blame, grep. No writes.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Pushci @finsavvyai/pushciAI-native zero-config CI/CD. 19 languages, 40+ frameworks. Free forever.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mapnostics @ffteema/mapnostics-mcpCodebase intelligence for AI agents — dead code, blast radius, ownership.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Git Archaeologist @engrmaziz/git-archaeologistTrace code history, commit reasoning, and PR context directly from Git logs.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Repo Security Scanner — Malicious Code & Supply Chain @eltociear/repo-security-scannerAudit GitHub repos for malicious and supply-chain code before you depend on them.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Sl @donovan-jasper/sl-mcpMCP server for Sapling (sl) version control4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- KukGit @amithkukllod777/kukgitRead and write KukGit repositories, files, issues and pull requests from an AI assistant.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Sphior Code @toraastrta/sphior-code-mcpDeterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Reposcout @rakesh1002/reposcoutDiscover, enrich, and rank GitHub repos for an objective with weighted, evidence-based scoring.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vaspera Hardening @rcolkitt/vaspera-hardeningEnterprise certification for codebases with multi-agent security, reliability, and quality audits7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- GitHub Inside Claude Code @kirchlive/github-inside-claude-codeNormalized GitHub-CLI bridge for Claude Code — 89 ops, 6 families incl. federation sources7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Project Brain @gentleelephant/project-brainRead-only source search and retrieval across configured GitHub repositories5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Ybe Check @addycuber/ybe-checkYbe Check – security and compliance orchestrator for AI-generated repositories.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Arlet @arlet/mcpCreate, deploy, and operate MCP servers directly from your GitHub repositories.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- gitbuyer MCP @gitbuyer/mcpFind the repo to build from: search 100k+ repos by base-fitness, clone free or buy over x402.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
