MCP Marketplace Launches Security-Scanned Directory of 1,900+ MCP Tool Plugins
Security-First MCP Plugin Directory
MCP Marketplace addresses trust issues in the growing MCP ecosystem by providing a security-scanned directory of over 1,900 MCP tool plugins. The platform was created in response to concerns about giving unvetted servers access to files, databases, and API keys.
Security Features
Every plugin listed on mcp-marketplace.io undergoes multi-layer security analysis before being included in the directory. The platform provides:
- Risk scores (0-10 scale) with detailed reports covering data exfiltration, obfuscated code, excessive permissions, and known vulnerabilities
- Endpoint probing for remote servers to check authentication and transport security
- Full transparency with security reports visible on every listing
Directory Contents and Installation
The marketplace currently includes:
- 1,900+ MCP servers
- Community reviews
- Creator reputation grades and profiles
- One-click installation for Claude Desktop, Cursor, ChatGPT, VS Code, and other platforms
The creator is soliciting feedback about security concerns with MCP servers and what would make developers trust a plugin enough to install it.
📖 Read the full source: r/LocalLLaMA
👀 See Also
SIDJUA v0.9.7: Open Source Multi-Agent AI with Pre-Action Governance Enforcement
SIDJUA v0.9.7 is a self-hosted, open source multi-agent AI framework that enforces governance rules before agents act, blocking unauthorized actions like budget overruns or scope violations. It supports multiple LLM providers, runs on 4GB RAM, and includes a desktop GUI built with Tauri v2.
PayClaw Launches Sandbox for Payment MCP Server with Virtual Visa Cards
PayClaw has launched a sandbox environment for its payment MCP server, featuring merchant-locked virtual Visa cards with 15-minute expiry, MFA-gated human approval per transaction, and intent declaration before card issuance. Production cards are scheduled for March 4.
Open-source Claude Code skill diagnoses AI adoption roadblocks
An MIT-licensed Claude Code skill analyzes where companies get stuck with AI adoption—tooling, culture, or measurement—and builds 90-day plans with named owners. Based on interviews with 100+ founders and board members.
Agentic Context Engine: Automated Agent Improvement Loop with 34.2% Accuracy Gain
An open-source tool automates the entire agent improvement loop from trace analysis to fix implementation, achieving 34.2% accuracy improvement on Tau-2 Bench in one iteration. The system uses Claude Code in a REPL environment to analyze failures and decide between prompt or code fixes.