MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
"MCP server for fetching and exploring NPM package source code. Built with TypeScript, supports package browsing, file extraction, and code analysis."
MIT ★ 1 -
Automated packaging for tokensave (Semantic Code Intelligence for AI Coding Agents) as tokensave-bin AUR package (x86_64, aarch64)
Apache-2.0 ★ 1 -
Code, package, docs, and paper search MCP server — per-package navigation, per-repo intelligence, vulns, docs, academic papers
MIT ★ 1 -
tiamat-scanner-mcpgithub.com/toxfox69/tiamat-entityupdated this year
MCP server for supply chain package scanning — detects typosquatting, malicious install scripts, obfuscation, and dependency confusion in npm/PyPI packages. Works with Claude Code, Cline, and any MCP client.
npm MIT -
package-intelgithub.com/adam121393/package-intelupdated this year
Package & dependency intelligence for AI coding agents. Free npm, PyPI and crates.io health, vulnerability, dependency-graph and download data over MCP; consolidated risk scores paid per-call in USDC via x402.
MIT -
Claude plugin for Packrift packaging supplies: fit any item to the right box or mailer, live prices and stock, delivered cost to a US ZIP code, and checkout on packrift.com.
MIT -
bodegagithub.com/hunchom/bodegaupdated this year
A macOS package manager: yum surface over Homebrew with a native Go bottle installer (~4× faster), transaction journal, interactive TUI, Claude Code plugin, and MCP server.
MIT ★ 1 -
Evidence-first npm package and project dependency checks for developers, coding agents, and MCP clients before code executes.
npm MIT -
Clipboard tools for AI coding agents: a Bash MCP server with clipboard_copy and clipboard_copy_file, native backends with an OSC 52 fallback over SSH, and hooks that point agents to the tools instead of pbcopy. Plugin for Claude Code and Codex, package for Pi.
MIT -
Claude Code plugin: security news and alerts for the tech your projects actually run on (Composer/npm packages, runtimes, OS packages), from vendor feeds, CISA, OSV and NVD.
GPL-3.0 ★ 1 -
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
npm MIT ★ 123 -
Find vetted agent skills for your task, PyPI packages for your code, and research behind both — Skill Federation finder as a Node MCP server. Zero-install via npx; exposes find_skills / find_packages / find_research / get_skill_bundle tools to Claude and
npm MIT -
تمهيد — ground work for execution: turn a project description into a validated, execution-ready planning & handoff package for Claude Code. Relational package store (SQLite ⇄ canonical JSONL), MCP-only writes, schema-enforced quality gates, HTML review surface. Successor of Keystone.
MIT -
whop-mcpgithub.com/furkankoykiran/whop-mcpupdated this year
MCP server for the Whop Company API. Lets AI assistants manage payments, memberships, products, promo codes, affiliates and reviews in natural language, with retries and structured error handling. TypeScript with Zod, published on npm and GitHub Packages.
MIT ★ 6 -
Python package on PyPI (not a Rust crate): a code graph of routes, calls, data access and platform boundaries. pip install cg-code-graph
pypi MIT -
fetchrgithub.com/thesatellite-ai/fetchrupdated this year
An open-source HTTP client with browser TLS fingerprinting (JA3/JA4, HTTP/2, QUIC) — a CLI, an MCP server that gives Claude Desktop & Claude Code real HTTP access, and an importable Go package. Requests look like Chrome or Firefox, passing anti-bot detection that blocks curl.
Apache-2.0 ★ 1 -
This package provides seamless integration with Claude Code, allowing you to run AI-powered coding sessions directly in your Emacs environment.
GPL-3.0 ★ 67 -
Stop AI coding agents installing packages that do not exist. MCP server + CLI for detecting hallucinated and slopsquatted npm packages. Zero dependencies.
MIT -
llmgraph-mcpactive
LLMGRAPH by Brainfoods Studio: local MCP server for coding agents. Launcher that runs the npm package.
pypi SEE LICENSE IN https://beta.llmgraph.in/eula/ -
An MCP server installer for Roo Code. Handles the installation from Github, requirements, package management, update, installation and MCP Json configuration.
★ 10 -
cheetah-grebupdated this year
AI-powered intelligent code search - client package with grep, read, and AST analysis (GPU reranking via cloud API)
pypi MIT -
mcp-diggergithub.com/janeksm/mcp-diggerupdated this year
MCP server giving AI coding agents progressive, on-demand access to .NET C# NuGet package source code.
npm MIT -
Evidence-first codebase analysis for coding agents (runs the Python package verinoda through uvx, pipx or a private venv)
npm Apache-2.0 -
Package versions MCP for Claude Code & Grok — 39 registries, 15 tools, safe upgrade pipeline.
NOASSERTION -
Zoho Notebook Skills + MCP server, packaged as a plugin for Claude Code and Cursor.
MIT -
open-code-reviewgithub.com/raye-deng/open-code-reviewupdated this year
🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.
NOASSERTION ★ 40 -
Stops AI coding agents from installing or running npm packages that don't exist. Claude Code plugin + MCP server, zero deps, no account.
npm ★ 3 -
Telepathic messaging inside your coding agent. Public source of record for the slashvibe-mcp npm package.
npm MIT -
Global patent search for AI agents via the Taiwan IPO GPSS API: MCP server + skill, packaged for Claude Code and Codex
Apache-2.0 -
Find what your AI coding agent left behind: hallucinated packages, leaked keys, truncated code, mocked stubs. Zero dependencies. npx aftertaste
MIT -
Multi-provider AI image and text-to-speech generation, packaged as a Claude Code plugin and MCP server
★ 1 -
Open-source, local code intelligence and dependency graph for cross-repository impact analysis. Map APIs, events, schemas, packages, databases, and ownership for AI coding agents via MCP.
NOASSERTION ★ 4 -
leakrank-guardgithub.com/ProtoTeemo/leakrank-guardupdated this year
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents. MCP server, docs for the leakrank-guard npm package.
MIT -
Secure Node.js execution sandbox for AI. Allows coding agents & LLMs to dynamically run JavaScript, install NPM packages, and retrieve results, facilitating code generation, testing, and interactive assistance. MCP-compatible.
★ 4 -
Is this dependency still maintained? MCP server, CLI and GitHub Action that score npm packages, PyPI packages and GitHub repos 0–100 for maintenance health, with an A–F grade and plain-language risks. Works with Claude, Cursor and VS Code.
npm Apache-2.0 ★ 1 -
vaporcheckgithub.com/cdmx-in/vaporcheckupdated this year
Stops AI coding assistants from using packages, files, and functions that don't exist. A safety net against hallucinated and slop-squatted names.
Apache-2.0 -
Risk signals for a repository or an npm/PyPI package, with evidence. Never runs the target's code.
Apache-2.0 ★ 2 -
Install gate for AI coding agents: blocks malicious, hallucinated and typosquatted packages (npm, PyPI, crates.io, Go) before Claude Code installs them. Hook + MCP server + CLI.
MIT -
Ground truth about npm packages for AI coding agents. Catches hallucinated and slopsquatted dependencies before they reach your lockfile.
MIT ★ 4 -
Memory and workflow automation for MCP, Codex, and Claude Code — skills that learn from your corrections. GitHub is the primary source; npm package is frozen at v2.3.1.
npm MIT ★ 1 -
Offline, package-aware Oracle PL/SQL code intelligence in Rust — change impact, dependency graph, honest uncertainty, self-healing coverage
Apache-2.0 ★ 3 -
@alphab.io/amgithub.com/srobinson/attention-mattersupdated this year
Geometric memory for AI coding agents. Installs the 'attention-matters' package.
npm MIT -
Voice-anchored causal evidence recorder for AI coding agents — talk, point, and get an evidence package your agent can act on. 语音锚定的因果证据记录仪。
MIT ★ 1 -
Find the security holes your AI coding assistant just shipped. MCP server + CLI for vibe-coded web & mobile apps: leaked keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, hallucinated packages.
MIT ★ 1 -
semcode-mcpgithub.com/huawang1258/semantic-code-mcpupdated this year
Semantic code search MCP server: Tree-sitter AST chunking + voyage-code-3 embeddings + hybrid retrieval (sqlite-vec + FTS5 + RRF) + Voyage rerank-2.5 + call graph expansion. Thin npx wrapper that launches the Python package via uvx.
npm MIT -
Web scraping plugins for AI coding agents (Claude Code, Cursor, Codex, Gemini CLI, OpenCode, Copilot CLI, Factory Droid, Devin) and Dify: the Spicrawl MCP server, packaged. URLs to Markdown, batch jobs, sessions.
Apache-2.0 -
The hosted Global law MCP server (law of 200+ countries, any date) packaged for Claude Code, Codex, Cursor, Gemini CLI and Grok Build, with skills.
CC0-1.0 -
A fast browser-use layer for CLI coding agents: MCP server, CLI and Python API. This package is a launcher; it runs the Python tool through uv.
npm MIT -
Full-featured Google Analytics 4 CLI — Data API + Admin API, OAuth/SA auth, multiple output formats, MCP server. Ships native AI-assistant skill packages for Claude Code, Codex, Qwen, and Gemini CLIs.
npm MIT -
A Model Context Protocol (MCP) server for executing Python code and managing Python packages.
MIT ★ 3 -
vdiffgithub.com/mcurmi05/vdiffupdated this year
Breaking-change diffs for npm packages, served over REST and MCP, so coding agents stop writing code against outdated API knowledge.
NOASSERTION -
Open-source skills for Claude Code and Codex, with an MCP server, a PyPI package and Suede Awesome Everything, a directory that scores AI agent skills 0 to 99. Created by Jason Colapietro, founder and CEO of Suede AI.
npm MIT ★ 124 -
Native repository intelligence for coding agents: 66 MCP operations backed by typed evidence graphs, impact, architecture, local CI restrictions, APIs, Git, search, semantic links, n8n workflows, Dify apps, agent packages, Mermaid diagrams, and Web3 ABIs.
npm MIT -
ReactiveUI ecosystem guidance MCP server for AI-assisted code generation, review, and package/platform recommendations.
MIT ★ 4 -
MCP server that helps AI coding assistants verify packages and APIs before using them, and turn ideas into checked plans.
MIT ★ 2 -
Version-accurate library docs and a dependency check for AI coding agents. MCP server, pre-install hook, CLI and GitHub Action that check every package an agent pins (advisories, malware, lookalikes, versions that do not exist) before the install runs. Local, MIT.
MIT ★ 5 -
Legacy MCP security server — superseded by correctover-mcp-gateway for Claude Code, Cursor, Cline and Windsurf. Install the gateway instead; the runtime SDK is the correctover package.
npm LicenseRef-Proprietary -
mcpgithub.com/decionis/mcpactive
Decionis MCP policy tools and native Claude Code, Codex, and Copilot execution hooks — evaluate agent actions against DECIONIS_POLICY.md before they run. npx -y --package=@decionis/mcp decionis-mcp
Apache-2.0 -
@mcpskillsio/servergithub.com/bebravebekind/mcpskills-serverupdated this year
Use the MCPSkills pre-install trust layer from Claude Code, Cursor, or any MCP client. Accepts GitHub repos, npm packages, Smithery URLs, and OpenClaw skills. 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence), safety scanning, OpenClaw frontmatte
npm MIT -
CLI Bridge for DeepSeek Harness (DSH): one package bridging six local coding-CLI agents — agy (Google Antigravity CLI), Tencent CodeBuddy Code, Xiaomi MiMo (MiMoCode), OpenCode, Claude Code, and OpenAI Codex CLI. Each provider keeps its own agent preset (
npm MIT