← All categories
Screened · filesystem

Filesystem MCP servers, screened for description honesty.

200 servers screened · 0 confirmed flagged · 2 held for review. An LLM judge reads each tool description for hidden instructions (semantic screen, advisory, status PARTIAL). A clean result means the description is not lying - not that the tool is safe to grant filesystem access. Method: how a finding is produced.

Own a filesystem MCP server? Screen its description →

  1. 1325.AIscreened · no manipulation

    Verified directory of 44,000+ Black-owned U.S. businesses. Search, maps, loyalty rewards.

    evidenceNo malicious instructions found

  2. ai.artidrop/artidropscreened · no manipulation

    Publish HTML, Markdown, and multi-file sites as shareable URLs instantly via MCP.

    evidencePublishes user content as shareable URLs

  3. File Storagescreened · no manipulation

    Upload files and get public CDN links in chat.

    evidenceNo malicious instructions found

  4. Boolsai Directoryscreened · no manipulation

    Indexed ecommerce site directory — vendor lookups, brands by city/market/founder. 10 tools.

    evidenceNo malicious instructions found

  5. Cofoundscreened · no manipulation

    MCP-native co-founder directory your AI agent searches, screening inbound pitches for you.

    evidenceDeclared capability, no hidden instructions

  6. Synapse RMCPscreened · no manipulation

    Host, Docker, Compose, SSH, logs, ZFS, and file operations over MCP and CLI.

    evidenceNo malicious instructions found

  7. Synapse RMCPscreened · no manipulation

    Rust MCP and CLI server for Docker, host inspection, SSH, logs, ZFS, and safe file operations.

    evidenceNo malicious instructions found

  8. ai.ironscout/ironscoutscreened · no manipulation

    Read-only ammo pricing: offer search, caliber market snapshots, retailer directory. Descriptive.

    evidenceNo malicious instructions found

  9. ai.justdrop/mcpscreened · no manipulation

    Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.

    evidenceDeclared capability, no hidden instructions

  10. MCP Junctionscreened · no manipulation

    Search a nightly-refreshed directory of MCP servers by keyword, category or topic.

    evidenceNormal search capability

  11. Scout by Optimlyscreened · no manipulation

    Query the AI Brand Directory. Audit brand visibility in ChatGPT, Claude, and Gemini.

    evidenceDeclared capability, no hidden instructions

  12. Relaystationscreened · no manipulation

    Pay-per-call agent infrastructure: file storage & handoff, compute tools, messaging, e-sign, KYC.

    evidenceNo malicious instructions found

  13. Revuoscreened · no manipulation

    Agent-callable B2B SaaS directory: capability-structured, continuously verified listings.

    evidenceNo malicious instructions found

  14. Root Data Public Directoryscreened · no manipulation

    Public Root Data dental analytics directory for DSOs, dental practices, blog, and FAQ tools.

    evidenceNo malicious instructions found

  15. Manage files and folders directly from your workspace. Read and write files, list directories, cre…

    evidenceNo secret access

  16. ai.smithery/cindyloo-dropbox-mcp-serverscreened · no manipulation

    Search, browse, and read your Dropbox files. Find documents by name or content, list folders, and…

    evidenceDeclared capability to access Dropbox files

  17. Manage your ClickUp workspace by creating, updating, and organizing tasks, lists, folders, and tag…

    evidenceNo malicious instructions found

  18. WPConvert MCPscreened · no manipulation

    Convert frontend folders to WordPress themes: quota, convert, status, download, preview, failures.

    evidenceNo malicious instructions

  19. Yenta Directoryscreened · no manipulation

    Anonymous, read-only cross-venue discovery of partner-approved venues, cities, destinations.

    evidenceNormal read-only discovery

  20. APICK Convertscreened · no manipulation

    File conversion: PDF, DOCX, STT, TTS, watermarking

    evidenceNo malicious instructions found

  21. DealerMaxscreened · no manipulation

    Italian cross-dealer MCP: cars, NLT rentals with quotations, dealer directory, automotive KB.

    evidenceNo malicious instructions found

  22. app.ofia/latexscreened · no manipulation

    Persistent AI LaTeX workspace: edit and compile multi-file projects, export publication-ready PDFs.

    evidenceNo malicious instructions found

  23. SRIFTscreened · no manipulation

    Secure P2P file transfer and encrypted chat for AI agents. No accounts, no API keys.

    evidenceNormal capability description

  24. app.undisk.mcp/stdio-proxyscreened · no manipulation

    Undisk MCP: safe file memory for AI agents.

    evidenceNo malicious instructions found

  25. Insuroscreened · no manipulation

    Free insurance vault MCP: OAuth policies, renewals, coverage Q&A, file PDFs. Global; not advice.

    evidenceNo malicious instructions

  26. Uneedscreened · no manipulation

    Search uneed.best's curated product directory: launches, rankings, deals and alternatives

    evidenceNo malicious instructions found

  27. Vitena Directoryscreened · no manipulation

    Search Vitena's public directory of bookable health and wellness professionals

    evidenceBenign public directory search

  28. co.yungle/yunglescreened · no manipulation

    Ask about your Yungle file deliveries — what was sent, who downloaded, what expires. Read-only.

    evidenceRead-only access, no data exfiltration mentioned

  29. 53ONscreened · no manipulation

    Directory and marketplace of local businesses and independent professionals near you.

    evidenceBenign directory description

  30. com.83blue.upload/agent-cloud-toolsscreened · no manipulation

    Free no-signup cloud tools for AI agents: file transfer, static site hosting, memory, handoff.

    evidenceNo malicious instructions

  31. Adbloop Meta Adsscreened · no manipulation

    Meta Ads MCP: bulk-create Facebook & Instagram ads across accounts from Drive folders, guardrailed.

    evidenceNo malicious instructions found

  32. Agentry — AI Agent Directoryscreened · no manipulation

    AI agent directory — search and compare 120+ agents across 12 categories.

    evidenceNo malicious instructions found

  33. AiESpherescreened · no manipulation

    Search jobs, tailor your resume, write cover letters, and file applications for you.

    evidenceDeclared capabilities, no hidden instructions

  34. AITWIRE — Tenant Opsscreened · no manipulation

    Review your AITWIRE recommendations and Brand Canon; file corrections for your approval.

    evidenceNo malicious instructions found

  35. com.ashtonforge/directoryscreened · no manipulation

    Read-only directory of vetted AI implementation agencies from the Ashton & Forge marketplace.

    evidenceBenign read-only directory

  36. Attestwirescreened · no manipulation

    EN 16931: validate invoice data or a UBL/CII file, emit UBL or CII XML. XRechnung, Peppol. Not PDF.

    evidenceNo malicious instructions found

  37. BeeIMG Image Hostingscreened · no manipulation

    Upload, delete, and manage images on BeeIMG. Supports URL and file uploads with premium plan info.

    evidenceNormal image hosting capability

  38. Pack a folder with a glob, look inside an archive, unpack it with bomb, traversal and symlink guards

    evidenceNo malicious instructions

  39. BeyondFolder Directoriesscreened · no manipulation

    Track SaaS directory submissions for your products via API key–gated Streamable HTTP MCP.

    evidenceNormal capability description

  40. brainCloud MCP Helperscreened · no manipulation

    Helper for brainCloud MCP that gives it local file access, enabling easy git sync of cloud code.

    evidenceLocal file access for git sync is declared capability

  41. ChooseHelp Treatment Directoryscreened · no manipulation

    Editorially independent addiction & mental-health directory — facilities, therapists, expert Q&A.

    evidenceNo malicious instructions found

  42. CrashStory MCPscreened · no manipulation

    Colorado personal injury attorney directory, AI-analyzed review intelligence, and crash data

    evidenceDeclared capability, no hidden instructions

  43. com.decaframe/decaframescreened · no manipulation

    Presentations, slides, reports and one-pagers your agent designs and you edit. Exports to one file.

    evidenceNo malicious instructions

  44. com.dropwarp/mcpscreened · no manipulation

    Send, list, and delete file transfers via DropWarp and get a shareable download link.

    evidenceDeclared capability, no hidden instructions

  45. com.dropwatchhq/payer-api-directoryscreened · no manipulation

    Directory of US clearinghouse/payer APIs (Availity, Optum, Waystar) with pricing & access signals.

    evidenceNo malicious instructions found

  46. Mint — Safe Mac Storage Actionsscreened · no manipulation

    Inspect Mac and AI-tool storage, explain file activity, and clean safely with Trash and Undo.

    evidenceNo malicious instructions

  47. Egnyte Remote MCP Serverscreened · no manipulation

    Egnyte's remote MCP server for secure AI access, search, upload and file management in your account.

    evidenceNo malicious instructions

  48. Fieldstubscreened · no manipulation

    Capture extra work on a jobsite and file it into Procore as a Change Event on real budget codes.

    evidenceNo malicious instructions

  49. com.formester/mcpscreened · no manipulation

    Give AI agents access to form submissions — read, search, update, and process file attachments.

    evidenceDeclared capability to access and process form submissions

  50. Booyah Indexscreened · no manipulation

    AI-readable directory + commerce layer: 3,500+ SEA businesses, plus products from verified stores.

    evidenceNo malicious instructions found

  51. MCP server for valet parking: 789 US operators across 31,186 cities. 7 tools. No auth.

    evidenceNo malicious instructions found

  52. com.grcmigrate/directoryscreened · no manipulation

    Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

    evidenceRead-only access to public directory and guides

  53. hdplyscreened · no manipulation

    Publish a single HTML file as a live HTTPS site in seconds. Versioned deploys, no delete tool.

    evidenceNo malicious instructions

  54. com.hushvert/mcpscreened · no manipulation

    File conversion for AI agents: office docs, PDF to Word, video, and LLM-ready markdown via API.

    evidenceNo malicious instructions found

  55. com.itsnum/numscreened · no manipulation

    Travel places directory by 5arz: search 2.5M places, submit businesses and promos (human-reviewed).

    evidenceNo malicious instructions found

  56. John's Essentialsscreened · no manipulation

    144 deterministic file tools: PDF, image, media, convert, analyze. Connect in one click (OAuth).

    evidenceNo hidden instructions or data exfiltration

  57. Plexascreened · no manipulation

    Agentic directory of real businesses in Mexico & LATAM. Search by vertical and city.

    evidenceDeclared capability, no hidden instructions

  58. Sandwich Public Care Directoryscreened · no manipulation

    Read-only MCP server for Sandwich aging-parent care resources and cost data.

    evidenceNo secret files, data exfiltration, or hidden instructions

  59. Cloud Api Hub - Youtube Downloader: Get Youtube video info and download links to MP4 or MP3 file.

    evidenceNo hidden instructions

  60. LegalAIMCP Directoryscreened · no manipulation

    Search a curated directory of AI tools and MCP servers for law firms. Read-only, free, no auth.

    evidenceNo malicious actions described

  61. Keyless x402 compliance on Base: $0.001 OFAC wallet screen, $0.05 pack, $0.95 company file.

    evidenceNo suspicious instructions found

  62. Lodi Kids Activitiesscreened · no manipulation

    Free directory of youth programs and licensed daycares in Lodi, CA. 72 tools.

    evidenceNo malicious instructions found

  63. Mailbox MCPscreened · no manipulation

    Read, send, file and search email in any Gmail, Microsoft 365 or IMAP mailbox, plus its calendar.

    evidenceNormal capability description

  64. Scrub MCPscreened · no manipulation

    Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported.

    evidenceDeclared PII handling, no hidden instructions

  65. com.mcparmory/boxscreened · no manipulation

    Manage files, folders, and team collaboration with access controls

    evidenceDescribes expected functionality

  66. com.mcparmory/google-drivescreened · no manipulation

    Manage files, folders, permissions, and collaborative content in Google Drive

    evidenceDescribes expected functionality

  67. com.nabarfinder/nabarfinderscreened · no manipulation

    Human-verified directory of non-alcoholic bars: 1,500+ venues in 70 cities, rated and re-checked.

    evidenceNormal directory lookup

  68. NudgeHostheld for review

    File hosting for agents. Upload any file, get a public link in seconds.

    evidenceInstructs exfiltration of any file

  69. com.offensive360/o360-mcpscreened · no manipulation

    Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes

    evidenceNo secret file access or data exfiltration mentioned

  70. com.opentransporthub/mcpscreened · no manipulation

    Open Transport Hub - transport and logistics marketplace directory for AI agents.

    evidenceNo malicious instructions

  71. Orshotscreened · no manipulation

    Render on-brand images, PDFs and videos from templates. 60+ tools: brand kit, folders, workflows.

    evidenceNo malicious instructions found

  72. com.overlayqa/mcpscreened · no manipulation

    Run accessibility, contrast, and design token audits and file QA issues from your AI coding tool.

    evidenceNo malicious instructions found

  73. Read-only Texas oil & gas data: operator directory, county production, and dataset catalog.

    evidenceRead-only data access, no secret files or exfiltration

  74. com.politicalcomms/docsscreened · no manipulation

    Political Comms documentation MCP server: search docs, query the docs filesystem. No auth.

    evidenceNo malicious instructions found

  75. Caption File Checkscreened · no manipulation

    Parse WebVTT, SRT, or TTML for conformance, timing, overlaps, line length, and reading speed.

    evidenceNo malicious instructions

  76. com.pulsemcp/remote-filesystemscreened · no manipulation

    MCP server for remote filesystem operations on cloud storage (Google Cloud Storage).

    evidenceOnly cloud storage access

  77. CardPingscreened · no manipulation

    Manage your CardPing business-card directory: add, search, view scans, and manage events.

    evidenceNormal capability description

  78. com.relocation123/mcpscreened · no manipulation

    Country guides, customs rules, mover directory and quote requests for 155+ countries

    evidenceNormal capability description

  79. com.rssatlas/rss-atlasscreened · no manipulation

    Search a curated RSS feed directory and fetch latest articles. EN/JA. Sign in to use favorites.

    evidenceDeclared capability, no hidden instructions

  80. Singapore Business Directoryscreened · no manipulation

    Singapore business directory. Search companies, UENs, and SSIC industry classifications.

    evidenceDeclared capability, no hidden instructions

  81. Singapore Business Directoryscreened · no manipulation

    Singapore business directory. Search companies, UENs, and SSIC industry classifications.

    evidenceDeclared capability, no hidden instructions

  82. Siglatascreened · no manipulation

    Manage Siglata org files, folders, grants, members, invitations, sessions via CallScript over OAuth.

    evidenceNormal capability description

  83. Silicon Friendlyscreened · no manipulation

    Directory rating websites on AI-agent-friendliness. Search, lookup, and submit.

    evidenceDeclared capability, no hidden instructions

  84. stagenth · file-relayscreened · no manipulation

    Cloud file relay: chunked uploads, folders, share links, inline text reads, ZIP packing.

    evidenceNo malicious instructions found

  85. com.submitmap/directoryscreened · no manipulation

    A directory of product launch platforms: where your product qualifies and how each form is filled.

    evidenceNo malicious instructions found

  86. Teleprompterscreened · no manipulation

    Read and write your Teleprompter.com scripts and folders: list, create, update, and organize.

    evidenceNo malicious actions described

  87. The-Snipscreened · no manipulation

    Team knowledge base for snippets, API calls and docs. Agents search and file items; humans review.

    evidenceNo malicious instructions found

  88. Finish Gridscreened · no manipulation

    A finishing tool, not a to-do list: file tasks, read today's plan, and work dispatched queues.

    evidenceBenign task management description

  89. toolfoundscreened · no manipulation

    Agent-native launch platform and tool directory: search, alternatives, trending, launch via MCP.

    evidenceNo malicious instructions found

  90. Tulimoascreened · no manipulation

    Discover curated SaaS and AI-agent tools in the Tulimoa directory; submit and edit your listings.

    evidenceNo malicious instructions found

  91. UNITEMFG U.S. Manufacturer Directoryscreened · no manipulation

    Search verified U.S. manufacturers with provenance, freshness, and live directory statistics.

    evidenceNo malicious instructions found

  92. AnyFilescreened · no manipulation

    Connect AnyFile to AI clients to manage files, share links, file requests, and analytics.

    evidenceNormal capability description

  93. com.vandorla/workspace-toolsscreened · no manipulation

    Sandbox workspace tools: search, file read, DB queries, integrations. Returns synthetic data.

    evidenceDeclared capabilities, no hidden instructions

  94. com.verifyum/mcpscreened · no manipulation

    Privacy-preserving file proofs on Solana. Files are hashed locally. Currently free, no API key.

    evidenceNo hidden instructions or data exfiltration

  95. com.vibsync/vibsyncscreened · no manipulation

    One shared brain for your AI coding agents: team memory, agent Q&A, tasks, and file claims.

    evidenceNo malicious instructions found

  96. WorkOSscreened · no manipulation

    Manage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.

    evidenceNo malicious instructions found

  97. com.writulos/scribescreened · no manipulation

    Generate clean markdown documentation for your code — one file, or up to 20 in one batch.

    evidenceNormal documentation generation

  98. com.wyrdmcp/wyrdscreened · no manipulation

    Exposes one granted folder to any AI client, read-only, behind a path-containment fence.

    evidenceNormal read-only folder exposure

  99. de.honestdog/honestdogscreened · no manipulation

    Vetted German dog-breeder directory, S-E breed health grades and tests, adoptable shelter dogs

    evidenceNo malicious instructions found

  100. dev.bigapi/mcpscreened · no manipulation

    File operations for AI agents: PDF, extraction, OCR, images. $0.01/op, 100 free.

    evidenceNormal capability description

  101. MemoFS MCP Serverscreened · no manipulation

    Persistent memory and virtual filesystem MCP server for AI agents.

    evidenceNormal capability description

  102. Preflight utility evidence, open a $149 scan checkout, and file scoped buyer intake.

    evidenceNo hidden instructions or data exfiltration

  103. Prismismscreened · no manipulation

    Upload any file, get a tracked shareable link. DocSend for AI agents.

    evidenceNo malicious instructions found

  104. dev.toll402/toll402-mcpscreened · no manipulation

    x402 pay-per-call tools for agents: web, PDF, provenance, 4M-business directory, paid listings.

    evidenceNo malicious instructions

  105. Trailscreened · no manipulation

    Issue tracker and durable project memory for your coding agent, scoped to the folder you open.

    evidenceBenign tool description

  106. dev.yafl/mcpscreened · no manipulation

    Agent-first E2EE file transfer over MCP: move files between machines in one tool call, gone in 24h.

    evidenceDeclared capability, no hidden instructions

  107. Brick Directoryscreened · no manipulation

    Provides data for LEGO sets, minifigures, parts and elements. Not affiliated with LEGO® Group.

    evidenceNo malicious instructions found

  108. DevRel Directoryscreened · no manipulation

    Search DevRel tools, communities, jobs, events, CFPs, and guides from devrel.directory.

    evidenceDeclared capability, no hidden instructions

  109. nohumans.directoryscreened · no manipulation

    We buy from x402 endpoints with real USDC and publish delivery outcomes. Check before you spend.

    evidenceNo malicious instructions

  110. directory.pwa/guichetscreened · no manipulation

    Search pwa.directory, submit a progressive web app, and get a payment link a human pays.

    evidenceNo hidden malicious instructions

  111. ee.coservices/mcpscreened · no manipulation

    Coservices marketing and IT agency services directory for AI agents.

    evidenceNo malicious instructions

  112. BinaSmartscreened · no manipulation

    Quote and book fixed-price rides in Addis Ababa, search the BinaSmart directory and Ethiopia guides

    evidenceNormal booking and search capability

  113. IBAN Validation MCPscreened · no manipulation

    Validate IBANs in 111 countries; bank directory checks for DE, AT, BE, FR, LU, NL, PT and ES.

    evidenceNo malicious instructions found

  114. Muralists Directoryscreened · no manipulation

    Search the curated directory of professional muralists and street artists in Europe.

    evidenceNormal directory search

  115. mcp.film directoryscreened · no manipulation

    Search the curated directory of MCP servers for AI filmmaking and plan a full production stack.

    evidenceNo malicious instructions found

  116. Caliperscreened · no manipulation

    Geometry and CAD file metadata extraction for STL, OBJ, PLY, PCD, LAS/LAZ, glTF/GLB.

    evidenceNo malicious instructions found

  117. monappamoiscreened · no manipulation

    Host AI-generated single-file HTML apps with JSON persistence. No signup.

    evidenceNo malicious intent described

  118. Skill of Skillsscreened · no manipulation

    Quality-ranked, cross-platform directory of AI coding skills, plugins and MCP servers.

    evidenceNo malicious instructions found

  119. Arcaeon Ledgerscreened · no manipulation

    Tamper-evident action logging for agents: hash-chained append/verify, one JSONL file, zero deps.

    evidenceNo secret access or data exfiltration mentioned

  120. Biurkoscreened · no manipulation

    Polish invoicing and KSeF e-invoicing: issue, send, settle and file a company's documents

    evidenceNormal invoicing tool

  121. Dorikuscreened · no manipulation

    Shared control plane for AI coding agents — tasks, memory, decisions, file locks. 12 tools.

    evidenceNo hidden actions

  122. FixYourDocsheld for review

    File structured docs-feedback reports to the FixYourDocs hub via a file_doc_feedback tool.

    evidenceexfiltrates data to FixYourDocs hub

  123. io.github.0Mattias/bettermemoryscreened · no manipulation

    Memory for coding agents, checked against the filesystem and git before it is believed.

    evidenceNo malicious instructions found

  124. io.github.0xka13b/ms-onedrive-mcpscreened · no manipulation

    Microsoft OneDrive MCP server — browse, read, and manage files and folders through Microsoft Graph.

    evidenceDeclared capability to access files and folders

  125. Chalkieboard iCloudscreened · no manipulation

    Read Chalkieboard (iPad) iCloud lesson folders, add materials, append lesson plans. No network.

    evidenceNormal capability description

  126. Filesscreened · no manipulation

    Sandboxed local filesystem: read, search, edit, copy, archive, and safely manage files.

    evidenceDeclared capabilities, no hidden instructions

  127. Gitscreened · no manipulation

    Local Git via MCP: status, log, diff, file history, branches, and gated stage/commit. Pure-JS.

    evidenceDeclared capabilities, no hidden instructions

  128. agent-tools (x402 + MCP + A2A directory)screened · no manipulation

    Discover x402 services, MCP servers and A2A agents by intent — agent-tools.cloud directory.

    evidenceNo malicious intent described

  129. io.github.agntcy/dir-mcpscreened · no manipulation

    MCP server for working with OASF agent records in the Agntcy Directory.

    evidenceNo malicious instructions found

  130. AitherOS ADKscreened · no manipulation

    Agent runtime with typed memory, knowledge and code graphs, plus file and web tools

    evidenceNo malicious instructions found

  131. Useful Utilitiesscreened · no manipulation

    63 tools an LLM can't do alone, in focused subsets: file edits, live data, real checksums.

    evidenceDescribes tool capabilities, no hidden instructions

  132. io.github.alex-deus/mcp-dharmamitrascreened · no manipulation

    Dharmamitra OCR for Tibetan / Sanskrit / Devanagari images; writes extracted text to a file.

    evidenceNo malicious instructions

  133. io.github.AlexikM/gibilscreened · no manipulation

    Spawns an ephemeral Ubuntu VM with project clone, shell exec, file I/O, and auto-destroy on TTL.

    evidenceDeclared capabilities, no hidden instructions

  134. Search a healthcare provider directory and get full provider details by id.

    evidenceNormal capability

  135. Verify what agents actually shipped, arbitrate file collisions, refuse with structured reasons.

    evidenceNo malicious instructions found

  136. Oracle Formsscreened · no manipulation

    Serves Oracle Forms module content (.fmb/.mmb/.pll/.olb) from a directory to MCP clients.

    evidenceNo malicious instructions found

  137. TokenSavescreened · no manipulation

    Code intelligence for 15+ languages: semantic graph queries instead of file reads. 37 MCP tools.

    evidenceNo malicious instructions found

  138. DOMShellscreened · no manipulation

    Drive Chrome with filesystem commands (ls, cd, grep, click, type). One MCP tool, multi-agent.

    evidenceDescribes Chrome interaction

  139. io.github.arimunandar/figsnap-mcpscreened · no manipulation

    The Figma file you have open, as MCP tools. Extract, edit, and keep a saved set.

    evidenceNo hidden instructions or data exfiltration

  140. io.github.arose26/zapier-discovery-mcpscreened · no manipulation

    Automation discovery: search Zapier's app directory and find popular Zap templates between apps.

    evidenceNo malicious instructions found

  141. llmsmap.me International Directoryscreened · no manipulation

    Read-only search and discovery for the international llms.txt directory maintained by llmsmap.me.

    evidenceRead-only search, no data exfiltration or secret access

  142. Marrowscreened · no manipulation

    Shared memory for parallel AI coding agents. Local, free, with rooms and file claims.

    evidenceNo malicious instructions found

  143. Expensescreened · no manipulation

    Receipt tracker with no friction: receipts arrive by email and file themselves

    evidenceNo malicious intent described

  144. io.github.assafbar2/agentswitchboardscreened · no manipulation

    Search a curated directory of 300+ verified AI agents, MCP servers, and agentic tools.

    evidenceNo malicious instructions found

  145. io.github.astrogilda/waitbusscreened · no manipulation

    Workstation-local event bus: agents wait on or emit CI/pytest/Docker/filesystem events, no polling.

    evidenceNo malicious instructions found

  146. mcp-catalogscreened · no manipulation

    Search MCP servers in the public mcp-catalog.ru directory.

    evidenceNormal public search capability

  147. io.github.BasilSkyWalk/parecodescreened · no manipulation

    Token-aware ripgrep code search and atomic multi-file edits for coding agents.

    evidenceNo malicious instructions found

  148. Beecargoscreened · no manipulation

    Publish a file from an agent and get a durable beecargo.net/d/{shortId} share link.

    evidenceNormal file sharing tool

  149. io.github.beneb89/changegamerscreened · no manipulation

    Agent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.

    evidenceNo malicious instructions found

  150. Haypilescreened · no manipulation

    Hybrid search over your local documents, with file and page citations. One binary, fully local.

    evidenceNo secret files, exfiltration, or hidden instructions mentioned

  151. kObsidianscreened · no manipulation

    Filesystem-first MCP for Obsidian — an LLM-maintained wiki inspired by Karpathy's LLM Wiki.

    evidenceNo suspicious actions

  152. ITIN Financescreened · no manipulation

    Verified ITIN lender directory + 290 bilingual guides on US loans, cards & credit without an SSN.

    evidenceNo malicious instructions found

  153. KiCad Copilotscreened · no manipulation

    File-oriented MCP server for KiCad schematics, PCB placement, routing, and pours.

    evidenceNo malicious instructions found

  154. BMLT Meetingsscreened · no manipulation

    Search Narcotics Anonymous meetings worldwide via the BMLT directory.

    evidenceDeclared capability, no hidden data access

  155. io.github.brunosrz/vectorascreened · no manipulation

    AI assistant with RAG, web search, filesystem and memory. MCP sub-agent for Claude Code.

    evidenceNo hidden actions

  156. MCP server for filesystem access

    evidenceNo suspicious actions

  157. io.github.cassilup/filewashscreened · no manipulation

    Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal.

    evidenceNo malicious instructions found

  158. io.github.chrischall/skill-mcpscreened · no manipulation

    Serves a directory of Agent Skills over MCP: list, load, read files, run declared scripts

    evidenceNormal tool capability description

  159. CloudSpritescreened · no manipulation

    Signed-in CloudSprite: search datasets and docs, set org/team/project scope, file feedback.

    evidenceNormal capability description

  160. io.github.codespar/mcp-rinnescreened · no manipulation

    Brazilian card acquiring API — merchants, cards-on-file, 3DS, PIX, banking, pricing.

    evidenceNo malicious instructions found

  161. Coherence guard for shared files: denies stale writes so agents don't silently overwrite each other.

    evidenceDenies stale writes, no secret access or exfiltration

  162. io.github.colapsis/transfascreened · no manipulation

    Upload any file, get a signed link. SHA-256 verified, TTL-enforced, no account required.

    evidenceNo malicious instructions found

  163. Context Lensscreened · no manipulation

    Semantic search knowledge base with serverless LanceDB. Zero setup, 100% local, 25+ file types

    evidenceNo malicious instructions found

  164. File Organizer Ai MCP Server by MEOK AI Labs

    evidenceNo malicious instructions

  165. io.github.CSOAI-ORG/meok-mcp-test-mcpscreened · no manipulation

    MEOK MCP Test MCP — golden-file + schema-drift + tool-failure tests for any MCP server. Drop-in

    evidenceNo malicious instructions found

  166. Cairnscreened · no manipulation

    Log Claude Code work sessions, file edits, and tasks to your Cairn account.

    evidenceNo malicious instructions found

  167. hledit MCPscreened · no manipulation

    Hash-anchored file edits for MCP clients. Rejects stale writes before they happen.

    evidenceNo malicious instructions found

  168. 2native SSH MCP Serverscreened · no manipulation

    SSH-based MCP server for remote command execution and file transfer. Credentials stay local.

    evidenceNormal capability description

  169. io.github.dasasian/gdocs-mcpscreened · no manipulation

    Treat a Google Doc like a local file: content editing, tracked-changes review, comments, tables.

    evidenceNo malicious instructions found

  170. Payaionscreened · no manipulation

    Agent file transfer. No API key to start; price downloads in USDC on Base.

    evidenceNo malicious intent described

  171. HyperStorescreened · no manipulation

    Search and inspect 6,500+ curated AI apps from the HyperStore directory.

    evidenceNo malicious instructions found

  172. io.github.dharani0804/mcp-folder-scoutscreened · no manipulation

    Read-only folder triage: what is in a folder, what is stale, and where the space went.

    evidenceNo malicious instructions

  173. Advanced filesystem operations with strict security boundaries for AI agents

    evidenceNo malicious intent

  174. MCP File Toolsscreened · no manipulation

    Non-UTF-8 files: CP1251, CP1252, KOI8, ISO-8859, UTF-16, GBK auto-detected and preserved

    evidenceNo malicious instructions found

  175. DWG MCP Serverscreened · no manipulation

    Read-only DWG file access for AI clients through MCP.

    evidenceNormal read-only capability

  176. GLM MCPscreened · no manipulation

    GLM (Zhipu/Z.ai) as a ~10x cheaper file-editing subagent for AI coding agents.

    evidenceNo malicious instructions found

  177. io.github.dockster/uxspot-mcpscreened · no manipulation

    uxspot.io UX reference: glossary, AI x UX tools directory, checklists and Learn UX curriculum

    evidenceNo malicious instructions found

  178. Filesystemscreened · no manipulation

    Read, create, and edit files.

    evidenceNo malicious instructions found

  179. Google Drivescreened · no manipulation

    Allow AI systems to list, search, upload, download, and manage files and folders in Google Drive.

    evidenceDescribes expected functionality

  180. Letterboxscreened · no manipulation

    File-based comms protocol for AI-to-AI dialogue between terminal agents.

    evidenceNo malicious instructions

  181. LDAP Assistant MCPscreened · no manipulation

    MCP server for 389 Directory Server health diagnostics, log analysis, and SOS-report investigation

    evidenceNo malicious instructions found

  182. io.github.eaisdevelopment/mcp-multi-editscreened · no manipulation

    Atomic multi-file find-and-replace by Essential AI Solutions (essentialai.uk)

    evidenceNo malicious instructions found in description

  183. io.github.Easysend-co/easysendscreened · no manipulation

    EasySend file sharing MCP server - upload, download and share files. No authentication required.

    evidenceNo malicious instructions found

  184. Umbrascreened · no manipulation

    Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

    evidenceNo malicious instructions found

  185. Everything File Searchscreened · no manipulation

    Lightning-fast Windows file search for AI agents via voidtools Everything's real-time NTFS index

    evidenceNo malicious instructions found

  186. ellmos FileCommanderscreened · no manipulation

    Filesystem MCP server: files, processes, sessions, async search, OCR, archives, safe delete.

    evidenceNo malicious instructions found

  187. Memory Fabricscreened · no manipulation

    File-first, local-first MCP memory for AI coding assistants: Markdown + YAML, no vector DB.

    evidenceNo malicious instructions found

  188. File I/O and primitive-placement tools so AI assistants can create and manage Altium libraries.

    evidenceNormal capability description

  189. TweekIT MCP Serverscreened · no manipulation

    Normalize and convert more than 400 file types via TweekIT's hosted MCP streamable HTTP endpoint.

    evidenceNo malicious instructions found

  190. io.github.eutech-directory/legis-linkscreened · no manipulation

    Construction compliance AI. Wire sizing, load calc, battery clearance. AU, USA, CA, UK, EU.

    evidenceNo malicious instructions found

  191. Execute chroot-filesystem-jail-mcpscreened · no manipulation

    Premium agentic endpoint for chroot-filesystem-jail-mcp.

    evidenceNo malicious instructions

  192. io.github.ezpzfile/ezpzfilescreened · no manipulation

    Local file tools for agents: documents, PDFs, images, QR codes. Nothing is uploaded.

    evidenceDescribes local file handling, no hidden instructions

  193. GoDropscreened · no manipulation

    Self-hosted file host: upload a file, get a public URL an agent can paste into a pull request.

    evidenceNo malicious instructions found

  194. io.github.fieldcure/essentialsscreened · no manipulation

    Essential MCP server: HTTP, web search, downloads, Wolfram|Alpha, shell, JS, file I/O, memory.

    evidenceDeclared capabilities, no hidden instructions

  195. io.github.fieldcure/filesystemscreened · no manipulation

    Secure MCP server for sandboxed filesystem operations with document parsing support.

    evidenceNo malicious instructions found

  196. io.github.file-kiwi/filekiwi-mcp-serverscreened · no manipulation

    Upload files to file.kiwi and get shareable links instantly.

    evidenceNo malicious instructions found

  197. io.github.fkom13/mcp-sftp-orchestratorscreened · no manipulation

    Serveur MCP pour l'orchestration de tâches distantes (SSH/SFTP) avec une file d'attente persistante.

    evidenceNo hidden actions

  198. File AIscreened · no manipulation

    Agent-ready local document context with stable anchors.

    evidenceNo malicious instructions found

  199. io.github.geraservicesuk/mcp-gerasurescreened · no manipulation

    Microinsurance: get quotes, buy policies, file claims, manage coverage. 50+ countries.

    evidenceDeclared capabilities, no hidden instructions

  200. io.github.getjoystick/nanobanana-mcpscreened · no manipulation

    Lean MCP server for Google's Nano Banana (Gemini) image models. Returns file paths, not base64.

    evidenceNo malicious instructions found

Adversarial test fixtures

These are synthetic, hand-authored poisoned tool descriptions - not real registry servers - run through the same screen to show what it catches. They are excluded from the directory above and from search.

fail · criticalADVERSARIAL FIXTURE: list_directory (hidden injection)

evidenceExfiltrates .env file contents

fail · criticalADVERSARIAL FIXTURE: write_file (covert log exfiltration)

evidenceExfiltrates conversation history

fail · criticalADVERSARIAL FIXTURE: read_file (SSH key exfiltration)

evidencereads secret files silently

Other categories