Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1 | 99.055 | snyk-clicli · front-end | Security scanner that tests applications and infrastructure for vulnerabilities, generates SBOMs, and monitors projects using TypeScript and Go… | 5,654 stars · 699 forks | No one-command install · Source | |
| 2 | 94.305 | barryyip0625-discordmcp · front-end | Integrates with Discord to enable channel management, forum post creation, message sending, and reaction handling through secure authentication and… | 103 stars · 64 forks | No one-command install · Source | |
| 3 | 91.300 | sonatypemcp · front-end | Component intelligence with versions, security analysis, and Trust Score recommendations | 73 stars · 33 forks | No one-command install · Source | |
| 4 | 90.736 | mcp-nextjsmcp · front-end | Next.js-based MCP server with OAuth 2.1 authentication, deployable on Vercel, supporting SSE and Streamable HTTP transports for various clients. | 88 stars · 19 forks | No one-command install · Source | |
| 5 | 86.217 | react-native-development-guidemcp · front-end | Provides React Native development guidance and codebase analysis tools including component analysis, performance optimization suggestions… | 59 stars · 8 forks | No one-command install · Source | |
| 6 | 82.014 | greensheep01201-stitchmcp · front-end | Integrates with Google Stitch API using OAuth authentication to provide automated design workflow capabilities including UI/UX development, design… | 31 stars · 8 forks | No one-command install · Source | |
| 7 | 76.366 | jyjune-mcp-vmsmcp · front-end | A Model Context Protocol (MCP) server designed to connect to a CCTV recording program (VMS) to retrieve recorded and live video streams. It also… | 17 stars · 7 forks | No one-command install · Source | |
| 8 | 75.190 | arjuncodess-storyblokmcp · front-end | Integrates with Storyblok CMS for complete content management including story operations, publishing workflows, version control, asset handling… | 9 stars · 9 forks | No one-command install · Source | |
| 9 | 52.498 | dudu1111685-waha-whatsappmcp · front-end | Integrates with WhatsApp through WAHA platform to enable complete messaging automation including sending and receiving media files, managing contacts… | 5 stars · 1 fork | No one-command install · Source | |
| 10 | 47.273 | trivy-sbom-generatormcp · front-end | Generates Software Bill of Materials (SBOM) for container images using Trivy scanner, providing detailed component information including package… | 3 stars · 2 forks | No one-command install · Source | |
| 11 | 43.275 | toan203-osv-uimcp · front-end | Visual CVE audit dashboard for npm, Python, Go, and Rust. Scan from Claude/Cursor, opens a browser UI for human review (human-in-the-loop), applies… | 4 stars | No one-command install · Source | |
| 11 | 43.275 | geoffwhittington-devicimcp · front-end | Integrates with the Devici threat modeling platform to manage security workflows including user and team management, threat model creation, component… | 4 stars | No commit datelisted | No one-command install · Source |
| 13 | 32.223 | sap-security-notes-mcp-servermcp · front-end | Enables querying SAP Security Note metadata including Patch Day releases, CVSS scores, CVEs, affected components, and actively-exploited status via… | 2 stars | No one-command install · Source | |
| 13 | 32.223 | drupal-best-practicesmcp · front-end | Provides access to curated Drupal development standards and security guidelines through searchable CSV-based knowledge covering coding conventions… | 2 stars | No one-command install · Source | |
| 13 | 32.223 | kof-stitch-mcpmcp · front-end | Enables AI-powered UI/UX design generation and management via Google Stitch, handling OAuth authentication automatically for MCP clients like Claude… | 2 stars | No one-command install · Source | |
| 13 | 32.223 | johmil-microsoft-teams-notificationsmcp · front-end | Enables sending markdown-formatted notifications to Microsoft Teams channels using Azure AD authentication, specifically designed for development… | 2 stars | No one-command install · Source | |
| 17 | 23.374 | nikhil-ganage-airflow-tokenmcp · front-end | Integrates with Apache Airflow through Bearer token authentication to provide DAG operations, task instance management, connection handling, variable… | 1 fork | No one-command install · Source | |
| 18 | 22.557 | skill7mcp · front-end | Provides 634+ curated production-ready AI skills for any MCP-compatible client, covering areas like security, frontend, backend, infrastructure… | 1 star | No one-command install · Source | |
| 18 | 22.557 | testmcpservermcp · front-end | Provides a wide range of tools including math, image processing, filesystem, git, text utilities, network, date/time, security, and browser console… | 1 star | No one-command install · Source | |
| 20 | 13.333 | shipswiftmcp · front-end | Provides access to a library of iOS development recipes, including SwiftUI code, animations, and infrastructure components. Simplifies the… | 730 installs | No commit datelisted | No one-command install · Source |
| 21 | Unranked | mcp-object-authz-labmcp · front-end | A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools. | No signals yet | No one-command install · Source | |
| 22 | Unranked | nuwax-openui-mcpmcp · front-end | Enables MCP hosts to render OpenUI artifacts (inline or sidecar) for agent-generated UI components such as cards, dashboards, forms, and charts, with… | No signals yet | No one-command install · Source | |
| 23 | Unranked | amazon-flipkart-mcp-servermcp · front-end | Lightweight MCP server for interacting with Amazon and Flipkart search and authentication components. | No signals yet | No one-command install · Source | |
| 24 | Unranked | react-dev-mcpmcp · front-end | Enables safe, controlled filesystem operations and terminal command execution within allowed directories, with security rules to prevent access to… | No signals yet | No one-command install · Source | |
| 25 | Unranked | mcp-trust-demomcp · front-end | An intentionally vulnerable MCP server designed as a live demo target for the MCP Trust security scanner. It contains deliberate insecure patterns to… | No signals yet | No one-command install · Source | |
| 26 | Unranked | agentsecuritylensmcp · front-end | An MCP security trust-check server that evaluates component installation risks and provides safe-install decisions for autonomous agents. | No signals yet | No one-command install · Source | |
| 27 | Unranked | crunchtools-cloudflaremcp · front-end | Manages Cloudflare DNS records, Transform Rules, Page Rules, and cache purging with security-first design. | No signals yet | No one-command install · Source | |
| 28 | Unranked | vulnerable-mcp-servermcp · front-end | A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments. | No signals yet | No one-command install · Source | |
| 29 | Unranked | mcp-devops-server-2mcp · front-end | Provides DevOps and testing tools for full-stack applications, including UI testing, security audits, CI/CD validation, and Rust/Tauri support. | No signals yet | No one-command install · Source | |
| 30 | Unranked | api-security-best-practicesskill · front-end | Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API… | No signals yet | No commit datelisted | armory install api-security-best-practices --cli claude |
| 31 | Unranked | architect-reviewersubagent · front-end | Use this agent when you need to evaluate system design decisions, architectural patterns, and technology choices at the macro level. | No signals yet | No commit datelisted | armory install architect-reviewer --cli claude |
| 32 | Unranked | chaos-engineersubagent · front-end | Use this agent when you need to design and execute controlled failure experiments, validate system resilience before incidents occur, or conduct game… | No signals yet | No commit datelisted | armory install chaos-engineer --cli claude |
| 33 | Unranked | code-review-2skill · front-end | Perform code reviews following Sentry engineering practices. Use when reviewing pull requests, examining code changes, or providing feedback on code… | No signals yet | No commit datelisted | armory install code-review-2 --cli claude |
| 34 | Unranked | frontend-mobile-security-frontend-developersubagent · front-end | Build React components, implement responsive layouts, and handle client-side state management. Masters React 19, Next.js 15, and modern frontend… | No signals yet | No commit datelisted | armory install frontend-mobile-security-frontend-developer --cli claude |
| 35 | Unranked | frontend-security-codersubagent · front-end | Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Use PROACTIVELY for… | No signals yet | No commit datelisted | armory install frontend-security-coder --cli claude |
| 36 | Unranked | graphql-architect-2skill · front-end | Master modern GraphQL with federation, performance optimization, and enterprise security. Build scalable schemas, implement advanced caching, and… | No signals yet | No commit datelisted | armory install graphql-architect-2 --cli claude |
| 37 | Unranked | incident-response-code-reviewersubagent · front-end | Reviews code for logic flaws, type safety gaps, error handling issues, architectural concerns, and similar vulnerability patterns. Provides fix design… | No signals yet | No commit datelisted | armory install incident-response-code-reviewer --cli claude |
| 38 | Unranked | information-security-manager-iso27001skill · front-end | Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS… | No signals yet | No commit datelisted | armory install information-security-manager-iso27001 --cli claude |
| 39 | Unranked | korral-storelink-mcpmcp · front-end | Enables stock assessment and replenishment by exposing three deterministic tools: inspect stock positions, raise replenishment orders, and check order… | No signals yet | No commit datelisted | No one-command install · Source |
| 40 | Unranked | mcp-project-templatemcp · front-end | A universal, architecture-agnostic blueprint for building Model Context Protocol servers, providing a modular structure with components for domain… | No signals yet | No commit datelisted | No one-command install · Source |
| 41 | Unranked | network-engineersubagent · front-end | Use this agent when designing, optimizing, or troubleshooting cloud and hybrid network infrastructures, or when addressing network security… | No signals yet | No commit datelisted | armory install network-engineer --cli claude |
| 42 | Unranked | nextjs-middleware-creatorworkflow · front-end | Create optimized Next.js middleware with authentication, rate limiting, and routing logic | No signals yet | No commit datelisted | armory install nextjs-middleware-creator --cli claude |
| 43 | Unranked | nextjs-supabase-authskill · front-end | Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware… | No signals yet | No commit datelisted | armory install nextjs-supabase-auth --cli claude |
| 44 | Unranked | security-architectsubagent · front-end | PROACTIVELY USE this agent when you need to design comprehensive security frameworks, authentication systems, authorization models, or data protection… | No signals yet | No commit datelisted | armory install security-architect --cli claude |
| 45 | Unranked | security-threat-modelskill · front-end | Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a… | No signals yet | No commit datelisted | armory install security-threat-model --cli claude |
| 46 | Unranked | senior-securityskill · front-end | Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes… | No signals yet | No commit datelisted | armory install senior-security --cli claude |
| 47 | Unranked | substance-designer-mcpmcp · front-end | A security-focused MCP server for Adobe Substance 3D Designer that reads application state, creates and manipulates nodes, and saves packages, with… | No signals yet | No commit datelisted | No one-command install · Source |
| 48 | Unranked | threat-modeling-expertskill · front-end | Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security… | No signals yet | No commit datelisted | armory install threat-modeling-expert --cli claude |
| 49 | Unranked | threat-modeling-expertsubagent · front-end | Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security… | No signals yet | No commit datelisted | armory install threat-modeling-expert --cli claude |
| 50 | Unranked | ugreen-nas-mcp-servermcp · front-end | A secure MCP server designed for Ugreen NAS, enabling AI clients to list and access shared directories over SSE with token authentication and… | No signals yet | No commit datelisted | No one-command install · Source |
| 51 | Unranked | ui-ux-testersubagent · front-end | Use this agent when you need exhaustive UI and UX functionality testing driven by documented user flows, with browser or desktop interaction tooling… | No signals yet | No commit datelisted | armory install ui-ux-tester --cli claude |
| 52 | Unranked | vercel-edge-functionworkflow · front-end | Generate optimized Vercel Edge Functions with geolocation, authentication, and data transformation | No signals yet | No commit datelisted | armory install vercel-edge-function --cli claude |
| 53 | Unranked | xss-scanworkflow · front-end | XSS Vulnerability Scanner for Frontend Code | No signals yet | No commit datelisted | armory install xss-scan --cli claude |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.