Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1 | 94.401 | cycode-security-scannermcp · github-vcs | Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning on local files, Git repositories, and commit… | 100 stars · 66 forks | No one-command install · Source | |
| 2 | 92.384 | jfrogmcp · github-vcs | Bridges to the JFrog Platform, enabling interaction with Artifactory repositories, builds, security scanning, and release management for streamlined… | 118 stars · 26 forks | No one-command install · Source | |
| 3 | 87.837 | io-github-26zl-cybersec-toolkitmcp · github-vcs | Enables MCP-capable clients to query the tool registry, check install status, get tool recommendations for CTF or bug-bounty work, and run installed… | 64 stars · 11 forks | No one-command install · Source | |
| 4 | 85.697 | handsomestwei-java-class-analyzermcp · github-vcs | Analyzes and decompiles Java class files with CFR decompiler integration, Maven repository support, and dependency scanning to enable reverse… | 42 stars · 13 forks | No one-command install · Source | |
| 5 | 85.422 | agent-linkmcp · github-vcs | Enables two coding agents on separate machines to communicate directly via a private git repo, with end-to-end encryption and no server required… | 56 stars · 7 forks | No one-command install · Source | |
| 6 | 84.840 | aquasecurity-trivymcp · github-vcs | Integrates Trivy's security scanning capabilities to detect vulnerabilities, misconfigurations, licenses, and secrets in local filesystems, container… | 47 stars · 8 forks | No one-command install · Source | |
| 7 | 79.363 | sammcj-snykmcp · github-vcs | Integrates with Snyk CLI to scan GitHub repositories and Snyk projects for security vulnerabilities directly within conversations, enabling developers… | 15 stars · 11 forks | No one-command install · Source | |
| 8 | 70.328 | wangkanai-devops-enhancedmcp · github-vcs | Integrates with Azure DevOps to provide work item management, repository access, build pipeline operations, and pull request handling with automatic… | 12 stars · 4 forks | No one-command install · Source | |
| 9 | 69.986 | missionsquad-githubmcp · github-vcs | Integrates with GitHub's API to enable repository operations, file management, issue tracking, and code search directly within conversations through… | 10 stars · 6 forks | No one-command install · Source | |
| 10 | 64.883 | argus-mcpmcp · github-vcs | Enables AI-powered, zero-trust code review with multiple models, supporting single files, git diffs, and multiple files, with security, performance… | 13 stars · 1 fork | No one-command install · Source | |
| 11 | 63.439 | normal-coder-giteemcp · github-vcs | Integrates with Gitee repositories to enable repository creation, code management, issue tracking, and pull request workflows using a simple… | 7 stars · 4 forks | No one-command install · Source | |
| 12 | 50.895 | rupeebw-security-scannermcp · github-vcs | Performs comprehensive security analysis of code repositories by detecting exposed secrets, vulnerabilities, dependency issues, and configuration… | 2 stars · 3 forks | No one-command install · Source | |
| 13 | 49.118 | adityasugandhi-skillsyncmcp · github-vcs | Security-gated skill management server that scans GitHub repositories against 60+ threat patterns before allowing installation to Claude Code and… | 4 stars · 1 fork | No one-command install · Source | |
| 13 | 49.118 | wanzunz-github-graphql-apimcp · github-vcs | Provides direct access to GitHub's GraphQL API for querying repositories, issues, pull requests, and schema documentation with secure authentication… | 4 stars · 1 fork | No one-command install · Source | |
| 15 | 43.498 | athapong-argusmcp · github-vcs | Integrates with GitLab repositories to enable automated security assessments, code reviews, and DevOps workflows through repository analysis and file… | 2 stars · 2 forks | No one-command install · Source | |
| 16 | 41.082 | astromined-pygithubmcp · github-vcs | Integrates with GitHub's API through PyGithub to enable repository management, issue tracking, and pull request operations with automatic… | 1 star · 2 forks | No one-command install · Source | |
| 17 | 32.223 | repository-managermcp · github-vcs | A production-grade MCP server for managing git projects, offering dynamic tool selection and enterprise-grade security. | 2 stars | No one-command install · Source | |
| 17 | 32.223 | flagrixmcp · github-vcs | Enables AI agents to scan GitHub repositories and user profiles for malware signals before cloning, providing risk verdicts pinned to specific… | 2 stars | No one-command install · Source | |
| 17 | 32.223 | sanjanaspanda-github-code-reviewmcp · github-vcs | Integrates with GitHub's API to analyze pull requests, detect code patterns and security vulnerabilities, manage reviews and comments, and enforce… | 2 stars | No one-command install · Source | |
| 17 | 32.223 | shanksxz-github-repo-contextmcp · github-vcs | Provides a GitHub repository context retrieval tool that enables AI models to access repository structures, file contents, and filtered file lists… | 2 stars | No one-command install · Source | |
| 21 | 29.013 | geropl-githubmcp · github-vcs | Integrates with GitHub's API to enable repository management, file operations, issue tracking, pull request handling, and workflow automation with… | 1 star · 1 fork | No one-command install · Source | |
| 22 | 23.374 | forloop-mcpmcp · github-vcs | Enables AI harnesses to run iterative loops on code repositories with built-in quality evaluations, security gates, and approval workflows for tasks… | 1 fork | No one-command install · Source | |
| 23 | 22.557 | frontal-mcp-servermcp · github-vcs | Enables management of GitHub workflows, issue templates, and repository configuration for the Frontal MCP Server project through CI/CD pipelines and… | 1 star | No one-command install · Source | |
| 23 | 22.557 | io-github-jeff-nasseri-mikrotik-mcpmcp · github-vcs | Bridges AI assistants with MikroTik RouterOS devices, enabling natural language management of network configurations, firewall, VLANs, VPNs, and… | 1 star | No one-command install · Source | |
| 23 | 22.557 | shane-js-ghostfreemcp · github-vcs | Scans repository dependencies for known security vulnerabilities using CVE data from OSV.dev, NVD, and CISA. | 1 star | No one-command install · Source | |
| 23 | 22.557 | gh-aguantar-vibescanmcp · github-vcs | Security scanner for leaked secrets, dangerous code patterns, and git hygiene issues. | 1 star | No one-command install · Source | |
| 23 | 22.557 | juicetea-github-repository-integrationmcp · github-vcs | Integrates GitHub repositories with Cursor IDE, enabling direct access and interaction with GitHub content within the editor using only a Personal… | 1 star | No one-command install · Source | |
| 28 | Unranked | chatgpt-github-mcp-appmcp · github-vcs | This MCP server bridges ChatGPT to GitHub, letting you use natural language to read repositories, modify code, create branches, and open pull requests… | No signals yet | No one-command install · Source | |
| 29 | Unranked | pipeworx-githubmcp · github-vcs | Queries public GitHub repositories, users, issues, and pull requests via the GitHub public REST API without authentication. | No signals yet | No one-command install · Source | |
| 30 | Unranked | mcp-github-privatemcp · github-vcs | Enables AI agents to access private GitHub repositories, organizations, issues, pull requests, and file contents via OAuth authentication. | No signals yet | No one-command install · Source | |
| 31 | Unranked | committee-releasesmcp · github-vcs | Enables searching and retrieving documents that congressional committees publish on their own websites, including press releases, oversight letters… | No signals yet | No one-command install · Source | |
| 32 | Unranked | compuute-scanmcp · github-vcs | Static security scanner for MCP servers, analyzing GitHub repositories across 37 rules in 8 programming languages. | No signals yet | No one-command install · Source | |
| 33 | Unranked | repository-inspector-mcp-servermcp · github-vcs | Enables AI clients to inspect Git repository changes, run allowlisted validation commands, and generate Markdown review reports via MCP, with… | No signals yet | No one-command install · Source | |
| 34 | Unranked | eveaegis-mcpmcp · github-vcs | An AI-native governance control plane for GitHub portfolios that enables inventory sync, provenance analysis, classification, and policy enforcement… | No signals yet | No one-command install · Source | |
| 35 | Unranked | mcp-production-demomcp · github-vcs | An MCP server providing live GitHub repository and issue search tools, with production-grade features like config validation, structured logging… | No signals yet | No one-command install · Source | |
| 36 | Unranked | security-mcpmcp · github-vcs | Fetches GitHub Code Scanning alerts and applies minimal local patches to fix vulnerabilities, without creating branches, commits, or PRs. | No signals yet | No one-command install · Source | |
| 37 | Unranked | tridentchain-mcp-on-pypimcp · github-vcs | Local-first supply-chain CVE scanner. Scans project deps, system packages (Homebrew/apt), and IDE extensions (VS Code, JetBrains) via OSV, NVD, GHSA… | No signals yet | No one-command install · Source | |
| 38 | Unranked | shield-iamcp · github-vcs | Automated security audit assistant for GitHub repositories that detects static vulnerabilities (leaked credentials, vulnerable dependencies, bad… | No signals yet | No one-command install · Source | |
| 39 | Unranked | github-readonly-mcpmcp · github-vcs | A read-only MCP server for GitHub that exposes 7 tools (list repos, commits, branches, pull requests, issues, file contents, search) via a Cloudflare… | No signals yet | No one-command install · Source | |
| 40 | Unranked | mcp-devops-onpremisemcp · github-vcs | MCP server for on-premises Azure DevOps that lets AI assistants browse repositories, review pull requests, manage work items, and interact with wikis… | No signals yet | No one-command install · Source | |
| 41 | Unranked | mcp-trust-layermcp · github-vcs | Security scanner and trust verification layer for MCP ecosystem, enabling users to scan PyPI packages and GitHub repos for secrets, dangerous… | No signals yet | No one-command install · Source | |
| 42 | Unranked | pr-guardian-mcpmcp · github-vcs | Analyzes GitHub Pull Request diffs for security vulnerabilities and data leaks, using a deterministic filter to skip trivial changes and an AI-powered… | No signals yet | No one-command install · Source | |
| 43 | Unranked | io-github-daedalus-mcp-cryptographymcp · github-vcs | Exposes various cryptographic operations including key generation, symmetric/asymmetric encryption, hashing, and HMAC. Supports Fernet, AES, RSA… | No signals yet | No one-command install · Source | |
| 44 | Unranked | github-mcp-connectormcp · github-vcs | Enables browsing GitHub profile, repositories, issues, and pull requests directly in Claude conversation through OAuth authentication. | No signals yet | No one-command install · Source | |
| 45 | Unranked | secure-code-review-mcp-servermcp · github-vcs | Local MCP server that scans code for security issues (secrets, dependencies, configurations, risky patterns) and integrates with GitHub Copilot in VS… | No signals yet | No one-command install · Source | |
| 46 | Unranked | github-mcp-litemcp · github-vcs | A lightweight MCP server for GitHub with nine essential tools for reading files, managing pull requests, and creating issues, using personal access… | No signals yet | No one-command install · Source | |
| 47 | Unranked | mas-github-analyzermcp · github-vcs | Provides code auditing tools including repository cloning, AST analysis, security scanning with Semgrep, and LLM-powered code explanations via the… | No signals yet | No one-command install · Source | |
| 48 | Unranked | io-github-neogeweb3-code-health-suitemcp · github-vcs | Provides 28 MCP tools across 16 analysis engines for comprehensive Python code quality assessment, including complexity scoring, security scanning… | No signals yet | No one-command install · Source | |
| 49 | Unranked | felip3s-git-securitymcp · github-vcs | Analyzes GitHub repositories for security risks including exposed secrets, vulnerable dependencies, and high-churn hotspot files. | No signals yet | No one-command install · Source | |
| 50 | Unranked | finishkitmcp · github-vcs | Scan GitHub repositories for security vulnerabilities, deployment blockers, and code quality issues. | No signals yet | No one-command install · Source | |
| 51 | Unranked | cyberlensmcp · github-vcs | Security scanning for websites, public repositories, and Open CLAW skills. | No signals yet | No one-command install · Source | |
| 52 | Unranked | orcorus-repository-scannermcp · github-vcs | Scans GitHub repositories for security vulnerabilities by cloning, performing static analysis, secret detection, build verification, and AI-powered… | No signals yet | No one-command install · Source | |
| 53 | Unranked | sbomappmcp · github-vcs | SBOM generation, vulnerability scanning, and dependency analysis for local projects and Git repositories. | No signals yet | No one-command install · Source | |
| 54 | Unranked | git-issuer-mcpmcp · github-vcs | Enables AI agents to create GitHub issues on explicitly allow-listed repositories using GitHub App authentication, with input validation, rate… | No signals yet | No one-command install · Source | |
| 55 | Unranked | mcp-github-app-servermcp · github-vcs | Provides GitHub App authentication for Git and API operations, enabling temporary token generation for private repository access. | No signals yet | No one-command install · Source | |
| 56 | Unranked | github-pr-review-mcp-servermcp · github-vcs | Comprehensive MCP server for analyzing GitHub pull requests, detecting security vulnerabilities, assessing code quality, and providing risk ratings… | No signals yet | No one-command install · Source | |
| 57 | Unranked | codesentry-mcpmcp · github-vcs | AI-powered code review assistant that analyzes repositories for security vulnerabilities, performance bottlenecks, and code quality issues through… | No signals yet | No one-command install · Source | |
| 58 | Unranked | tyler-r-kendrick-secret-agentmcp · github-vcs | Parses local git repositories to generate tool descriptions, create Docker containers, and integrate CodeQL for security analysis, enabling automated… | No signals yet | No one-command install · Source | |
| 59 | Unranked | allow-git-operationsrules · github-vcs | Allow common git operations for version control workflow. Permits git status, diff, add, commit, and push operations while maintaining security by… | No signals yet | No commit datelisted | armory install allow-git-operations --cli claude |
| 60 | Unranked | code-reviewer-2skill · github-vcs | Comprehensive code review skill for TypeScript, JavaScript, Python, Swift, Kotlin, Go. Includes automated code analysis, best practice checking… | No signals yet | No commit datelisted | armory install code-reviewer-2 --cli claude |
| 61 | Unranked | common-securityrules · github-vcs | Mandatory pre-commit security checklist — no hardcoded secrets, validated inputs, parameterized queries — applied across languages. | No signals yet | No commit datelisted | armory install common-security --cli claude |
| 62 | Unranked | force-push-blockerhook · github-vcs | Block git force push commands using the if condition for efficient filtering. Prevents accidental force pushes that can overwrite remote history… | No signals yet | No commit datelisted | armory install force-push-blocker --cli claude |
| 63 | Unranked | git-managersubagent · github-vcs | Use this agent when you need to manage Git operations, organize commits, clean up repository history, or optimize Git workflows. This includes… | No signals yet | No commit datelisted | armory install git-manager --cli claude |
| 64 | Unranked | github-opsskill · github-vcs | GitHub repository operations, automation, and management. Issue triage, PR management, CI/CD operations, release management, and security monitoring… | No signals yet | No commit datelisted | armory install github-ops --cli claude |
| 65 | Unranked | mcp-github-pr-reviewermcp · github-vcs | This server enables AI agents to delegate GitHub pull request diffs for automated security auditing, returning structured vulnerability and… | No signals yet | No commit datelisted | No one-command install · Source |
| 66 | Unranked | secret-scanner-2hook · github-vcs | Secret Scanner Hook Detects hardcoded secrets before git commits | No signals yet | No commit datelisted | armory install secret-scanner-2 --cli claude |
| 67 | Unranked | security-bounty-hunterskill · github-vcs | Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports… | No signals yet | No commit datelisted | armory install security-bounty-hunter --cli claude |
| 68 | Unranked | security-ownership-mapskill · github-vcs | Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON… | No signals yet | No commit datelisted | armory install security-ownership-map --cli claude |
| 69 | Unranked | stackhawk-security-onboardingsubagent · github-vcs | Automatically set up StackHawk security testing for your repository with generated configuration and GitHub Actions workflow | No signals yet | No commit datelisted | armory install stackhawk-security-onboarding --cli claude |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.