← All categories
Screened · filesystem

Filesystem MCP servers, screened for description honesty.

200 servers screened · 0 confirmed flagged · 1 held for review. An LLM judge reads each tool description for hidden instructions (semantic screen, advisory, status PARTIAL). A clean result means the description is not lying - not that the tool is safe to grant filesystem access. Method: how a finding is produced.

Own a filesystem MCP server? Screen its description →

  1. 1325.AIscreened · no manipulation

    Verified directory of 44,000+ Black-owned U.S. businesses. Search, maps, loyalty rewards.

    evidenceNo malicious instructions found

  2. ai.artidrop/artidropscreened · no manipulation

    Publish HTML, Markdown, and multi-file sites as shareable URLs instantly via MCP.

    evidencePublishes user content as shareable URLs

  3. Boolsai Directoryscreened · no manipulation

    Indexed ecommerce site directory — vendor lookups, brands by city/market/founder. 10 tools.

    evidenceNo malicious instructions found

  4. Cofoundscreened · no manipulation

    MCP-native co-founder directory your AI agent searches, screening inbound pitches for you.

    evidenceDeclared capability, no hidden instructions

  5. Synapse RMCPscreened · no manipulation

    Rust MCP and CLI server for Docker, host inspection, SSH, logs, ZFS, and safe file operations.

    evidenceNo malicious instructions found

  6. ai.ironscout/ironscoutscreened · no manipulation

    Read-only ammo pricing: offer search, caliber market snapshots, retailer directory. Descriptive.

    evidenceNo malicious instructions found

  7. ai.justdrop/mcpscreened · no manipulation

    Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.

    evidenceDeclared capability, no hidden instructions

  8. Scout by Optimlyscreened · no manipulation

    Query the AI Brand Directory. Audit brand visibility in ChatGPT, Claude, and Gemini.

    evidenceDeclared capability, no hidden instructions

  9. Relaystationscreened · no manipulation

    Pay-per-call agent infrastructure: file storage & handoff, compute tools, messaging, e-sign, KYC.

    evidenceNo malicious instructions found

  10. Revuoscreened · no manipulation

    Agent-callable B2B SaaS directory: capability-structured, continuously verified listings.

    evidenceNo malicious instructions found

  11. Root Data Public Directoryscreened · no manipulation

    Public Root Data dental analytics directory for DSOs, dental practices, blog, and FAQ tools.

    evidenceNo malicious instructions found

  12. Manage files and folders directly from your workspace. Read and write files, list directories, cre…

    evidenceNo secret access

  13. ai.smithery/cindyloo-dropbox-mcp-serverscreened · no manipulation

    Search, browse, and read your Dropbox files. Find documents by name or content, list folders, and…

    evidenceDeclared capability to access Dropbox files

  14. Manage your ClickUp workspace by creating, updating, and organizing tasks, lists, folders, and tag…

    evidenceNo malicious instructions found

  15. ai.tooldirectory/catalogscreened · no manipulation

    Search the AI Tool Directory catalog: tool details, status checks, and alternatives.

    evidenceNo malicious instructions found

  16. DealerMaxscreened · no manipulation

    Italian cross-dealer MCP: cars, NLT rentals with quotations, dealer directory, automotive KB.

    evidenceNo malicious instructions found

  17. app.ofia/latexscreened · no manipulation

    Persistent AI LaTeX workspace: edit and compile multi-file projects, export publication-ready PDFs.

    evidenceNo malicious instructions found

  18. app.undisk.mcp/stdio-proxyscreened · no manipulation

    Undisk MCP: safe file memory for AI agents.

    evidenceNo malicious instructions found

  19. Uneedscreened · no manipulation

    Search uneed.best's curated product directory: launches, rankings, deals and alternatives

    evidenceNo malicious instructions found

  20. co.yungle/yunglescreened · no manipulation

    Ask about your Yungle file deliveries — what was sent, who downloaded, what expires. Read-only.

    evidenceRead-only access, no data exfiltration mentioned

  21. Adbloop Meta Adsscreened · no manipulation

    Meta Ads MCP: bulk-create Facebook & Instagram ads across accounts from Drive folders, guardrailed.

    evidenceNo malicious instructions found

  22. Agentry — AI Agent Directoryscreened · no manipulation

    AI agent directory — search and compare 120+ agents across 12 categories.

    evidenceNo malicious instructions found

  23. AITWIRE — Tenant Opsscreened · no manipulation

    Review your AITWIRE recommendations and Brand Canon; file corrections for your approval.

    evidenceNo malicious instructions found

  24. brainCloud MCP Helperscreened · no manipulation

    Helper for brainCloud MCP that gives it local file access, enabling easy git sync of cloud code.

    evidenceLocal file access for git sync is declared capability

  25. CrashStory MCPscreened · no manipulation

    Colorado personal injury attorney directory, AI-analyzed review intelligence, and crash data

    evidenceDeclared capability, no hidden instructions

  26. Default Privacyscreened · no manipulation

    Privacy Protocol directory, guides, diagnostics, formation intake. 23 tools, 7 resources, 6 prompts.

    evidenceNo malicious instructions

  27. com.dropwarp/mcpscreened · no manipulation

    Send, list, and delete file transfers via DropWarp and get a shareable download link.

    evidenceDeclared capability, no hidden instructions

  28. com.dropwatchhq/payer-api-directoryscreened · no manipulation

    Directory of US clearinghouse/payer APIs (Availity, Optum, Waystar) with pricing & access signals.

    evidenceNo malicious instructions found

  29. Egnyte Remote MCP Serverscreened · no manipulation

    Egnyte's remote MCP server for secure AI access, search, upload and file management in your account.

    evidenceNo malicious instructions

  30. com.formester/mcpscreened · no manipulation

    Give AI agents access to form submissions — read, search, update, and process file attachments.

    evidenceDeclared capability to access and process form submissions

  31. Booyah Indexscreened · no manipulation

    AI-readable directory + commerce layer: 3,500+ SEA businesses, plus products from verified stores.

    evidenceNo malicious instructions found

  32. MCP server for valet parking: 789 US operators across 31,186 cities. 7 tools. No auth.

    evidenceNo malicious instructions found

  33. com.grcmigrate/directoryscreened · no manipulation

    Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

    evidenceRead-only access to public directory and guides

  34. com.hushvert/mcpscreened · no manipulation

    File conversion for AI agents: office docs, PDF to Word, video, and LLM-ready markdown via API.

    evidenceNo malicious instructions found

  35. Immersive Commonsscreened · no manipulation

    Members-run AI builder space on Floor 10, Frontier Tower SF. 138 tools: events, news, directory.

    evidenceNo malicious instructions found

  36. John's Essentialsscreened · no manipulation

    110+ deterministic file tools: PDF, image, media, convert, analyze. Connect in one click (OAuth).

    evidenceNo malicious instructions found

  37. Plexascreened · no manipulation

    Agentic directory of real businesses in Mexico & LATAM. Search by vertical and city.

    evidenceDeclared capability, no hidden instructions

  38. Sandwich Public Care Directoryscreened · no manipulation

    Read-only MCP server for Sandwich aging-parent care resources and cost data.

    evidenceNo secret files, data exfiltration, or hidden instructions

  39. LegalAIMCP Directoryscreened · no manipulation

    Search a curated directory of AI tools and MCP servers for law firms. Read-only, free, no auth.

    evidenceNo malicious actions described

  40. Keyless x402 compliance on Base: $0.001 OFAC wallet screen, $0.05 pack, $0.95 company file.

    evidenceNo suspicious instructions found

  41. Lodi Kids Activitiesscreened · no manipulation

    Free directory of youth programs and licensed daycares in Lodi, CA. 72 tools.

    evidenceNo malicious instructions found

  42. Scrub MCPscreened · no manipulation

    Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported.

    evidenceDeclared PII handling, no hidden instructions

  43. com.mcparmory/boxscreened · no manipulation

    Manage files, folders, and team collaboration with access controls

    evidenceDescribes expected functionality

  44. com.mcparmory/google-drivescreened · no manipulation

    Manage files, folders, permissions, and collaborative content in Google Drive

    evidenceDescribes expected functionality

  45. com.overlayqa/mcpscreened · no manipulation

    Run accessibility, contrast, and design token audits and file QA issues from your AI coding tool.

    evidenceNo malicious instructions found

  46. com.politicalcomms/docsscreened · no manipulation

    Political Comms documentation MCP server: search docs, query the docs filesystem. No auth.

    evidenceNo malicious instructions found

  47. com.pulsemcp/remote-filesystemscreened · no manipulation

    MCP server for remote filesystem operations on cloud storage (Google Cloud Storage).

    evidenceOnly cloud storage access

  48. Singapore Business Directoryscreened · no manipulation

    Singapore business directory. Search companies, UENs, and SSIC industry classifications.

    evidenceDeclared capability, no hidden instructions

  49. Singapore Business Directoryscreened · no manipulation

    Singapore business directory. Search companies, UENs, and SSIC industry classifications.

    evidenceDeclared capability, no hidden instructions

  50. Silicon Friendlyscreened · no manipulation

    Directory rating websites on AI-agent-friendliness. Search, lookup, and submit.

    evidenceDeclared capability, no hidden instructions

  51. stagenth · file-relayscreened · no manipulation

    Cloud file relay: chunked uploads, folders, share links, inline text reads, ZIP packing.

    evidenceNo malicious instructions found

  52. Teleprompterscreened · no manipulation

    Read and write your Teleprompter.com scripts and folders: list, create, update, and organize.

    evidenceNo malicious actions described

  53. The-Snipscreened · no manipulation

    Team knowledge base for snippets, API calls and docs. Agents search and file items; humans review.

    evidenceNo malicious instructions found

  54. Tulimoascreened · no manipulation

    Discover curated SaaS and AI-agent tools in the Tulimoa directory; submit and edit your listings.

    evidenceNo malicious instructions found

  55. com.vandorla/workspace-toolsscreened · no manipulation

    Sandbox workspace tools: search, file read, DB queries, integrations. Returns synthetic data.

    evidenceDeclared capabilities, no hidden instructions

  56. WorkOSscreened · no manipulation

    Manage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.

    evidenceNo malicious instructions found

  57. com.x402-list/x402-list-mcpscreened · no manipulation

    x402-list directory MCP: services, facilitator volume, ranked picks, paid assessments.

    evidenceNo hidden actions

  58. de.honestdog/honestdogscreened · no manipulation

    Vetted German dog-breeder directory, S-E breed health grades and tests, adoptable shelter dogs

    evidenceNo malicious instructions found

  59. Prismismscreened · no manipulation

    Upload any file, get a tracked shareable link. DocSend for AI agents.

    evidenceNo malicious instructions found

  60. dev.yafl/mcpscreened · no manipulation

    End-to-end-encrypted file transfer for agents: upload, share, and download files over MCP.

    evidenceDeclared capability, no hidden instructions

  61. Brick Directoryscreened · no manipulation

    Provides data for LEGO sets, minifigures, parts and elements. Not affiliated with LEGO® Group.

    evidenceNo malicious instructions found

  62. DevRel Directoryscreened · no manipulation

    Search DevRel tools, communities, jobs, events, CFPs, and guides from devrel.directory.

    evidenceDeclared capability, no hidden instructions

  63. nohumans.directoryscreened · no manipulation

    Curated, probe-verified directory of paid x402 APIs. Agents check it before spending money.

    evidenceNo malicious instructions found

  64. IBAN Validation MCPscreened · no manipulation

    Validate IBANs in 111 countries; bank directory checks for DE, AT, BE, FR, LU, NL, PT and ES.

    evidenceNo malicious instructions found

  65. Caliperscreened · no manipulation

    Geometry and CAD file metadata extraction for STL, OBJ, PLY, PCD, LAS/LAZ, glTF/GLB.

    evidenceNo malicious instructions found

  66. host.nippy/nippyscreened · no manipulation

    Publish websites from Claude, the terminal, or CI — drop a folder, get a link that doesn't expire.

    evidenceNo malicious instructions found

  67. Skill of Skillsscreened · no manipulation

    Quality-ranked, cross-platform directory of AI coding skills, plugins and MCP servers.

    evidenceNo malicious instructions found

  68. Dorikuscreened · no manipulation

    Shared control plane for AI coding agents — tasks, memory, decisions, file locks. 12 tools.

    evidenceNo hidden actions

  69. Dropyourscreened · no manipulation

    Publish a self-contained HTML file to a stable public URL from your AI. Anonymous, EU-hosted.

    evidencePublishes public URL, no data exfiltration mentioned

  70. FixYourDocsheld for review

    File structured docs-feedback reports to the FixYourDocs hub via a file_doc_feedback tool.

    evidenceexfiltrates data to FixYourDocs hub

  71. io.github.0xka13b/ms-onedrive-mcpscreened · no manipulation

    Microsoft OneDrive MCP server — browse, read, and manage files and folders through Microsoft Graph.

    evidenceDeclared capability to access files and folders

  72. Salesforce Cloudscreened · no manipulation

    Salesforce CRM integration — opportunities, accounts, SOQL, file downloads, analytics

    evidenceNo malicious instructions found

  73. Filesscreened · no manipulation

    Sandboxed local filesystem: read, search, edit, copy, archive, and safely manage files.

    evidenceDeclared capabilities, no hidden instructions

  74. Gitscreened · no manipulation

    Local Git via MCP: status, log, diff, file history, branches, and gated stage/commit. Pure-JS.

    evidenceDeclared capabilities, no hidden instructions

  75. agent-tools (x402 + MCP + A2A directory)screened · no manipulation

    Discover x402 services, MCP servers and A2A agents by intent — agent-tools.cloud directory.

    evidenceNo malicious intent described

  76. io.github.agntcy/dir-mcpscreened · no manipulation

    MCP server for working with OASF agent records in the Agntcy Directory.

    evidenceNo malicious instructions found

  77. io.github.AlexikM/gibilscreened · no manipulation

    Spawns an ephemeral Ubuntu VM with project clone, shell exec, file I/O, and auto-destroy on TTL.

    evidenceDeclared capabilities, no hidden instructions

  78. Verify what agents actually shipped, arbitrate file collisions, refuse with structured reasons.

    evidenceNo malicious instructions found

  79. io.github.aoreshkov/oracle-forms-mcpscreened · no manipulation

    Serves Oracle Forms module content (.fmb/.mmb/.pll/.olb) from a directory to MCP clients.

    evidenceNo malicious instructions found

  80. TokenSavescreened · no manipulation

    Code intelligence for 15+ languages: semantic graph queries instead of file reads. 37 MCP tools.

    evidenceNo malicious instructions found

  81. DOMShellscreened · no manipulation

    Drive Chrome with filesystem commands (ls, cd, grep, click, type). One MCP tool, multi-agent.

    evidenceDescribes Chrome interaction

  82. llmsmap.me International Directoryscreened · no manipulation

    Read-only search and discovery for the international llms.txt directory maintained by llmsmap.me.

    evidenceRead-only search, no data exfiltration or secret access

  83. io.github.assafbar2/agentswitchboardscreened · no manipulation

    Search a curated directory of 300+ verified AI agents, MCP servers, and agentic tools.

    evidenceNo malicious instructions found

  84. io.github.astrogilda/waitbusscreened · no manipulation

    Workstation-local event bus: agents wait on or emit CI/pytest/Docker/filesystem events, no polling.

    evidenceNo malicious instructions found

  85. io.github.BasilSkyWalk/parecodescreened · no manipulation

    Token-aware ripgrep code search and atomic multi-file edits for coding agents.

    evidenceNo malicious instructions found

  86. io.github.beneb89/changegamerscreened · no manipulation

    Agent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.

    evidenceNo malicious instructions found

  87. kObsidianscreened · no manipulation

    Filesystem-first MCP for Obsidian — an LLM-maintained wiki inspired by Karpathy's LLM Wiki.

    evidenceNo suspicious actions

  88. BMLT Meetingsscreened · no manipulation

    Search Narcotics Anonymous meetings worldwide via the BMLT directory.

    evidenceDeclared capability, no hidden data access

  89. io.github.brunosrz/vectorascreened · no manipulation

    AI assistant with RAG, web search, filesystem and memory. MCP sub-agent for Claude Code.

    evidenceNo hidden actions

  90. MCP server for filesystem access

    evidenceNo suspicious actions

  91. io.github.cassilup/filewashscreened · no manipulation

    Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal.

    evidenceNo malicious instructions found

  92. io.github.cdeust/prd-spec-generatorscreened · no manipulation

    Turns a feature description into a verified 9-file PRD — multi-judge consensus, 17 MCP tools.

    evidenceNo malicious instructions found

  93. Coherence guard for shared files: denies stale writes so agents don't silently overwrite each other.

    evidenceDenies stale writes, no secret access or exfiltration

  94. io.github.colapsis/transfascreened · no manipulation

    Upload any file, get a signed link. SHA-256 verified, TTL-enforced, no account required.

    evidenceNo malicious instructions found

  95. Context Lensscreened · no manipulation

    Semantic search knowledge base with serverless LanceDB. Zero setup, 100% local, 25+ file types

    evidenceNo malicious instructions found

  96. file-organizer-ai-mcp MCP server by MEOK AI Labs

    evidenceNo malicious instructions found

  97. io.github.CSOAI-ORG/meok-mcp-test-mcpscreened · no manipulation

    MEOK MCP Test MCP — golden-file + schema-drift + tool-failure tests for any MCP server. Drop-in

    evidenceNo malicious instructions found

  98. Cairnscreened · no manipulation

    Log Claude Code work sessions, file edits, and tasks to your Cairn account.

    evidenceNo malicious instructions found

  99. hledit MCPscreened · no manipulation

    Hash-anchored file edits for MCP clients. Rejects stale writes before they happen.

    evidenceNo malicious instructions found

  100. HyperStorescreened · no manipulation

    Search and inspect 6,500+ curated AI apps from the HyperStore directory.

    evidenceNo malicious instructions found

  101. Advanced filesystem operations with strict security boundaries for AI agents

    evidenceNo malicious intent

  102. MCP File Toolsscreened · no manipulation

    Non-UTF-8/Unicode encoding: CP1251, CP1252, KOI8-R, ISO-8859 with auto-detection

    evidenceNo malicious instructions found

  103. GLM MCPscreened · no manipulation

    GLM (Zhipu/Z.ai) as a ~10x cheaper file-editing subagent for AI coding agents.

    evidenceNo malicious instructions found

  104. io.github.dockster/uxspot-mcpscreened · no manipulation

    uxspot.io UX reference: glossary, AI x UX tools directory, checklists and Learn UX curriculum

    evidenceNo malicious instructions found

  105. Filesystemscreened · no manipulation

    Read, create, and edit files.

    evidenceNo malicious instructions found

  106. Google Drivescreened · no manipulation

    Allow AI systems to list, search, upload, download, and manage files and folders in Google Drive.

    evidenceDescribes expected functionality

  107. LDAP Assistant MCPscreened · no manipulation

    MCP server for 389 Directory Server health diagnostics, log analysis, and SOS-report investigation

    evidenceNo malicious instructions found

  108. io.github.eaisdevelopment/mcp-multi-editscreened · no manipulation

    Atomic multi-file find-and-replace by Essential AI Solutions (essentialai.uk)

    evidenceNo malicious instructions found in description

  109. io.github.Easysend-co/easysendscreened · no manipulation

    EasySend file sharing MCP server - upload, download and share files. No authentication required.

    evidenceNo malicious instructions found

  110. Everything File Searchscreened · no manipulation

    Lightning-fast Windows file search for AI agents via voidtools Everything's real-time NTFS index

    evidenceNo malicious instructions found

  111. ellmos FileCommanderscreened · no manipulation

    Filesystem MCP server: files, processes, sessions, async search, OCR, archives, safe delete.

    evidenceNo malicious instructions found

  112. Memory Fabricscreened · no manipulation

    File-first, local-first MCP memory for AI coding assistants: Markdown + YAML, no vector DB.

    evidenceNo malicious instructions found

  113. TweekIT MCP Serverscreened · no manipulation

    Normalize and convert more than 400 file types via TweekIT's hosted MCP streamable HTTP endpoint.

    evidenceNo malicious instructions found

  114. io.github.eutech-directory/legis-linkscreened · no manipulation

    Construction compliance AI. Wire sizing, load calc, battery clearance. AU, USA, CA, UK, EU.

    evidenceNo malicious instructions found

  115. io.github.fieldcure/essentialsscreened · no manipulation

    Essential MCP server: HTTP, web search, downloads, Wolfram|Alpha, shell, JS, file I/O, memory.

    evidenceDeclared capabilities, no hidden instructions

  116. io.github.fieldcure/filesystemscreened · no manipulation

    Secure MCP server for sandboxed filesystem operations with document parsing support.

    evidenceNo malicious instructions found

  117. io.github.file-kiwi/filekiwi-mcp-serverscreened · no manipulation

    Upload files to file.kiwi and get shareable links instantly.

    evidenceNo malicious instructions found

  118. io.github.fkom13/mcp-sftp-orchestratorscreened · no manipulation

    Serveur MCP pour l'orchestration de tâches distantes (SSH/SFTP) avec une file d'attente persistante.

    evidenceNo hidden actions

  119. File AIscreened · no manipulation

    Agent-ready local document context with stable anchors.

    evidenceNo malicious instructions found

  120. mcpindexscreened · no manipulation

    The MCP directory that vets servers, not just lists them. Advisory trust screen before you install.

    evidenceNo malicious instructions found

  121. io.github.geraservicesuk/mcp-gerasurescreened · no manipulation

    Microinsurance: get quotes, buy policies, file claims, manage coverage. 50+ countries.

    evidenceDeclared capabilities, no hidden instructions

  122. io.github.getjoystick/nanobanana-mcpscreened · no manipulation

    Lean MCP server for Google's Nano Banana (Gemini) image models. Returns file paths, not base64.

    evidenceNo malicious instructions found

  123. io.github.getmasv/masvscreened · no manipulation

    Provides tools to use MASV API. MASV is reliable and secure large file transfer service.

    evidenceNo malicious instructions found

  124. GuruPDFscreened · no manipulation

    Convert, compress & merge PDFs and 100+ file formats from any AI agent. By GuruPDF.

    evidenceNo malicious instructions found

  125. io.github.holiday-forever/holidayforeverscreened · no manipulation

    Searchable directory of Airbnb listings — discover properties and retrieve direct Airbnb links.

    evidenceNo malicious instructions found

  126. io.github.holomodular/servicebricksscreened · no manipulation

    Generate a ServiceBricks C# .NET microservice as a ZIP file.

    evidenceNo malicious instructions found

  127. io.github.hostsmith/mcp-serverscreened · no manipulation

    Deploy static sites on Hostsmith - give it a file, get a live HTTPS URL. EU/US residency.

    evidenceNo malicious instructions found

  128. Agent Workspace MCPscreened · no manipulation

    A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.

    evidenceNo unauthorized actions

  129. Sandbox Env MCPscreened · no manipulation

    Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.

    evidenceNo malicious instructions found

  130. An MCP server that provides document format conversion

    evidenceNo malicious instructions found

  131. An MCP server that provides fast Spotlight file search capabilities for macOS

    evidenceDeclared capability, no hidden instructions

  132. An MCP server that provides PDF file conversion

    evidenceNo malicious instructions found

  133. OfficeAgent.NETscreened · no manipulation

    Create and edit real Word documents (filesystem or SharePoint): typed change plans, tracked changes

    evidenceNo malicious instructions found

  134. Hardened filesystem for AI agents — jailed root, read-only default, traversal/symlink-safe.

    evidenceNo unauthorized actions

  135. CLIO Parallel Sortscreened · no manipulation

    Parallel Sort MCP - High-Performance Log File Processing for LLMs with advanced sorting and analysis

    evidenceNo malicious intent

  136. io.github.j0hanz/filesystem-contextscreened · no manipulation

    🔍 Read-only MCP server for secure filesystem exploration, searching, and analysis

    evidenceRead-only

  137. Filesystem MCPscreened · no manipulation

    Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

    evidenceOnly file operations

  138. xProofscreened · no manipulation

    Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

    evidenceNo malicious instructions found

  139. io.github.jcc-ne/mcp-skill-serverscreened · no manipulation

    An MCP server that mounts your skill directory and add deterministic entry for deployment

    evidenceNo malicious instructions found

  140. Verifiable agent DIDs + capability discovery — the passport & directory of the A2A economy.

    evidenceNo malicious instructions found

  141. io.github.jdhart81/verdigraphscreened · no manipulation

    Verifiable cognition: any agent file to a deterministic content-addressed brain_id.

    evidenceNo malicious instructions found

  142. io.github.joinwell52-AI/fcopscreened · no manipulation

    FCoP 3.2.5 MCP server: 45 tools (tier:L1/L2/L3) for file-based multi-agent coordination.

    evidenceNo malicious instructions found in description

  143. io.github.joshmsimpson/exiftoolscreened · no manipulation

    Read, write, and remove metadata from 150+ file formats using ExifTool

    evidenceDeclared capability, no hidden instructions

  144. Search the HeyClaude directory of Claude Code agents, MCP servers, skills, and tools.

    evidenceDeclared search capability, no hidden instructions

  145. Aclimaçãoscreened · no manipulation

    Aclimação — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  146. Bogeylandscreened · no manipulation

    Bogeyland — directory of places, events, and listings.

    evidenceNo malicious instructions found

  147. Bom Retiroscreened · no manipulation

    Bom Retiro — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  148. Campo Beloscreened · no manipulation

    Campo Belo — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  149. Centroscreened · no manipulation

    Centro — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  150. DOJO+screened · no manipulation

    DOJO+ — directory of martial arts schools, classes, instructors, ranks, and events.

    evidenceNo malicious intent described

  151. Filipe Coffeescreened · no manipulation

    Filipe Coffee — directory of places, events, and listings.

    evidenceNo malicious instructions found

  152. Genesis Socialscreened · no manipulation

    Genesis Social — directory of places, events, and listings.

    evidenceNo malicious instructions found

  153. Gracie Barra Jiu-Jitsuscreened · no manipulation

    Gracie Barra Jiu-Jitsu — directory of martial arts schools, classes, instructors, ranks, and events.

    evidenceNo malicious instructions found

  154. Interlagosscreened · no manipulation

    Interlagos — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  155. Itaim Bibiscreened · no manipulation

    Itaim Bibi — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  156. Jardinsscreened · no manipulation

    Jardins — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  157. Moemascreened · no manipulation

    Moema — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  158. MONO Socialscreened · no manipulation

    MONO Social — directory of places, events, and listings.

    evidenceNo malicious instructions found

  159. Olé Futebolscreened · no manipulation

    Olé Futebol — directory of places, events, and listings.

    evidenceNo malicious instructions found

  160. Paraísoscreened · no manipulation

    Paraíso — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  161. Pinheirosscreened · no manipulation

    Pinheiros — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  162. Tatuapéscreened · no manipulation

    Tatuapé — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  163. Vila Buarquescreened · no manipulation

    Vila Buarque — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  164. Vila Madalenascreened · no manipulation

    Vila Madalena — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  165. Vila Marianascreened · no manipulation

    Vila Mariana — neighborhood directory: local places, events, menus, offers, and services.

    evidenceNo malicious instructions found

  166. io.github.justinmont84/loyaltyvipscreened · no manipulation

    U.S. casino directory + a player's loyalty data, comps, tiers, and gambling tax docs.

    evidenceDeclared capability, no hidden instructions

  167. io.github.Kavachh/agent-guard-mcpscreened · no manipulation

    Git-aware safe file ops for AI agents: delete anything except git-tracked source code.

    evidenceOnly deletes untracked files, no data exfiltration

  168. io.github.KitDevUA/video-vision-mcpscreened · no manipulation

    Analyze any video (local file or URL) into frames + transcript for Claude Code

    evidenceNo malicious instructions found

  169. agent-toolscreened · no manipulation

    Encoding-aware, indentation-smart file tools for AI coding agents with SSH, SFTP, and 20+ tools.

    evidenceNo malicious instructions found

  170. Frenchiescreened · no manipulation

    OCR, transcription, file extraction, and image generation for AI agents via MCP.

    evidenceNo malicious instructions found

  171. Hex Linescreened · no manipulation

    Hash-verified file editing MCP server with token efficiency hook for AI coding agents.

    evidenceNo malicious instructions found

  172. Offline AI-powered local file search. BM25 + semantic hybrid search across all documents.

    evidenceNo malicious instructions found

  173. Offline AI-powered local file search. BM25 + semantic hybrid search across all documents.

    evidenceNo malicious instructions found

  174. io.github.louis49/melchizedekscreened · no manipulation

    Persistent memory for Claude Code — offline, single-file, hybrid search.

    evidenceNo malicious instructions found

  175. Cairnscreened · no manipulation

    Local-first file-organization tools for your AI agent: tag, query, and digest a folder. No cloud.

    evidenceNo cloud access, no secret file read

  176. BACH FileCommanderscreened · no manipulation

    43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export.

    evidenceDescribes normal capabilities

  177. io.github.marin1321/mcp-devtoolsscreened · no manipulation

    MCP server giving AI agents safe access to filesystem, databases, processes, and APIs.

    evidenceAccess within bounds

  178. CAD MCP Serverscreened · no manipulation

    STEP file inspection for AI. Measure walls, draft angles, clearances. Returns facts, not guesses.

    evidenceNo malicious instructions found

  179. Wild Wallet — where agents get a bodyscreened · no manipulation

    Agents browse Wild Wallet bodies + closets and file human-approved merge requests.

    evidenceNo malicious intent described

  180. Google Drivescreened · no manipulation

    Google Drive integration with file operations, folder navigation, search, and sharing

    evidenceDescribes expected functionality

  181. agent-godmodescreened · no manipulation

    Sandboxed workspace MCP: file ops, argv-only run_command, list_files; BYO LLM prompts.

    evidenceNo malicious instructions found

  182. Query a folder of CSV / Parquet / JSON files with SQL — one queryable source, read-only.

    evidenceReads files from a specified folder, no secret access

  183. Microsoft 365 SharePointscreened · no manipulation

    Microsoft 365 SharePoint via Graph: sites, libraries, pages, lists, search, file/list mutations.

    evidenceDeclared capability, no hidden instructions

  184. CompShopscreened · no manipulation

    Search 350+ compensation surveys by industry, region, or job title. Independent directory.

    evidenceDeclared capability, no hidden data access

  185. Filesystem (reference)screened · no manipulation

    Reference MCP server for filesystem access, maintained by the Model Context Protocol project. Reads and writes files within directories the operator explicitly allows, via command-line arguments or Roots.

    evidenceExplicit access

  186. Hashfile MCPscreened · no manipulation

    Hash-anchored file editing with surgical precision over file editing and ironclad control of access

    evidenceNo malicious instructions found

  187. Octofsscreened · no manipulation

    Standalone MCP filesystem tools server — view, edit, shell, workdir.

    evidenceNo malicious instructions found

  188. io.github.n0zer0d4y/vulcan-file-opsscreened · no manipulation

    MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.

    evidenceDescribes file management

  189. io.github.nakishiyaman/digscreened · no manipulation

    MCP server for code archaeology: git blame, file history, contributors, and co-change analysis

    evidenceDeclared capabilities, no hidden instructions

  190. OWA Exchange MCP Serverscreened · no manipulation

    MCP server for Microsoft Exchange / OWA — email, calendar, directory, availability

    evidenceNo malicious instructions found

  191. Orchard — Agentic Cloud Backendscreened · no manipulation

    Managed database, auth, file storage, email, analytics, and deployment for coding agents.

    evidenceNo malicious instructions found

  192. fs-mcp-rsscreened · no manipulation

    A fast, configurable filesystem server for the Model Context Protocol (MCP), written in Rust.

    evidenceNo malicious instructions found

  193. io.github.NikolaNddTesla/sshmcpscreened · no manipulation

    SSH server management with zero-token SFTP file transfer and SOCKS proxy support

    evidenceNo malicious instructions found

  194. io.github.nogoo9/mcp-server-cloud-fsscreened · no manipulation

    Cloud replacement for mcp-server-filesystem — 20 tools for S3, Azure Blob, and GCS

    evidenceNo suspicious actions

  195. Fill 3C / SWOT / MECE / OKR into your local file. Local-first, zero-trust strategy cockpit.

    evidenceNo malicious instructions found

  196. io.github.npraught/orcpinscreened · no manipulation

    Paid x402 facts for AI agents: on-chain snapshots, endpoint reliability, trade math, free directory

    evidenceNo hidden actions

  197. Neutral, verification-gated MCP directory of Japan construction contractors (KIRA-audited).

    evidenceNo malicious instructions found

  198. io.github.OguntolaIbrahim/image-viewerscreened · no manipulation

    InChat Image Viewer MCP - View images inline in AI chat by just providing the file path

    evidenceNo malicious instructions found

  199. FileSystem MCP Serverscreened · no manipulation

    Secure filesystem access for AI agents with configurable directory and file type restrictions

    evidenceNo unauthorized actions

  200. io.github.onepunchtechnology/glassypicscreened · no manipulation

    AI image processing: upscale, resize, crop, compress, convert file format, and generate SEO metadata

    evidenceNo malicious instructions found

Adversarial test fixtures

These are synthetic, hand-authored poisoned tool descriptions - not real registry servers - run through the same screen to show what it catches. They are excluded from the directory above and from search.

fail · criticalADVERSARIAL FIXTURE: list_directory (hidden injection)

evidenceExfiltrates .env file contents

fail · criticalADVERSARIAL FIXTURE: write_file (covert log exfiltration)

evidenceExfiltrates conversation history

fail · criticalADVERSARIAL FIXTURE: read_file (SSH key exfiltration)

evidencereads secret files silently

Other categories