MCP Marketplace Launches Security-Scanned Directory of 1,900+ MCP Tool Plugins
Security-First MCP Plugin Directory
MCP Marketplace addresses trust issues in the growing MCP ecosystem by providing a security-scanned directory of over 1,900 MCP tool plugins. The platform was created in response to concerns about giving unvetted servers access to files, databases, and API keys.
Security Features
Every plugin listed on mcp-marketplace.io undergoes multi-layer security analysis before being included in the directory. The platform provides:
- Risk scores (0-10 scale) with detailed reports covering data exfiltration, obfuscated code, excessive permissions, and known vulnerabilities
- Endpoint probing for remote servers to check authentication and transport security
- Full transparency with security reports visible on every listing
Directory Contents and Installation
The marketplace currently includes:
- 1,900+ MCP servers
- Community reviews
- Creator reputation grades and profiles
- One-click installation for Claude Desktop, Cursor, ChatGPT, VS Code, and other platforms
The creator is soliciting feedback about security concerns with MCP servers and what would make developers trust a plugin enough to install it.
📖 Read the full source: r/LocalLLaMA
👀 See Also
devopsiphai: Open-source Claude Code skill audits operational health across 6 phases
devopsiphai is an open-source Claude Code skill that audits production project operability using a 6-phase process and ARC framework, outputting letter grades and a structured TODO.md with effort-estimated tasks.
Local Terminal CRM with Built-in MCP Server for Claude Integration
A developer built a personal CRM that runs in the terminal with local SQLite storage and includes a built-in MCP server, giving Claude access to 18 tools for managing contacts, deals, and follow-ups.
repo-mem: Open-Source MCP Server Adds Persistent Team Memory to Claude Code
repo-mem is an open-source MCP server that adds persistent, shared memory to Claude Code sessions using SQLite and Git. It solves team isolation by storing observations in per-user databases that get committed to the repository.
SigMap v8.9: Deterministic Context Layer Cuts Token Use 97% for AI Coding Agents
SigMap v8.9 achieves 97% token reduction, 88% hit@5 retrieval, and 49% fewer prompts per task. Works with Copilot, Claude Code, Cursor, Windsurf, Codex, OpenCode, Gemini CLI. Zero deps, fully offline.