- OctoCounts MCP Server @huanglizhuo/octocounts-mcpAnalyze and compare public GitHub repo line counts (SLOC) via OctoCounts, from any MCP client.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Bomly @bomly-dev/bomly-cliGive your coding agent the dependency graph it is about to change: scan, diff, explain, audit3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Sourcegraph MCP Server @sourcegraph/mcpSourcegraph code search, semantic search, go-to-definition, find-references, and diff search.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.14 GitHub stars.
- CogniRepo @ashlesh-t/cognirepoFAISS, call graph, AST, BM25 — 34 MCP tools for AI agents. 50-80% token reduction. Offline.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.14 GitHub stars.
- Mergewarden @sjh9714/mergewardenCheck whether a coding agent's changes stayed inside the scope it was given.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
- Agent Memory @xchucx/agent-memoryGit-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
- Locus @sylphxai/locusLocus — the exact code chunk for the job: local BM25 search for agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- Memex @stifler7/memexTemporal engineering context for agents via MCP.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
- Codeweaver @knitli/codeweaverSemantic code search built for AI agents. Hybrid, AST-aware, context for 166 languages.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.12 GitHub stars.
- Miru @takara/miruHybrid semantic and keyword code search for coding agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- ContextOS — Powered Exoskeleton for AI Coding @yubinbin32-ops/contextosContext exoskeleton for AI development: reduce token usage and context occupancy.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- Hunch @davesheffer/hunchShared records for AI agents: engineering decisions, bug history, rules, and work state through MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- coldstart @akashgoenka/coldstartCodebase memory for AI agents: an AST index plus agent-written notes that self-stale.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Vulnicheck @andrasfe/vulnicheckHTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.11 GitHub stars.
- DevTime @shakargy/devtimeLocal-first, read-only MCP server for evidence-backed repository memory.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Paparats – Local Semantic Code Search MCP @ibazylchuk/paparats-mcpLocal-first semantic code search across all your repos. Private context for AI coding assistants.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Klarion @0x1adi/klarionSecret scanning for AI agents: rules and entropy find candidates, a model decides which are real.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.10 GitHub stars.
- Lockstep @lockstep-team-agent/lockstepDecision memory for AI coding agents: captures decisions once, briefs every agent before it acts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- KLYPIX Project Brain @dahshanlabs/klypix-mcpActive state management for multi-agent coding: a shared, versioned project brain over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Prism @shailesh200/prismLocal-first repo intelligence for agents: DNA, health, blast radius, and Dispatch jobs.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- ControlKeel @aryaminus/controlkeelGoverned MCP workflows with policy validation, findings tracking, and review gates.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Mason @adrianczuczka/masonEngineering decisions, change impact, documentation audits, and CI evidence for coding assistants.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Kibi @looted/kibi-mcpMCP server for Kibi's requirements, traceability, and proof workflows in coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Hamster @gethamster/hamsterSearch and manage Hamster briefs, tasks, plans, and knowledge; trigger delivery from your agent.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.9 GitHub stars.
