FilesystemSystem
by Anthropic
Read/write files within allow-listed directories.
Risk score
12
Permissions
fs.readfs.write (scoped)
1.2M4.9Claude · Cursor · VSCode
Every server, safety-graded
18 MCP servers across development, data, messaging, and system categories. Each reviewed against a 45-check permission matrix and assigned a tier: SAFE, CAUTION, or DANGER.
18 ENTRIES · REFRESHED WEEKLY
SAFE
FetchWeb
by Anthropic
Fetch URLs and extract text content.
Risk score
14
Permissions
net.fetch
980K4.9Claude · Cursor · VSCode
GitHubDev
by Anthropic
Read repos, issues, PRs. Write requires explicit scope.
Risk score
18
Permissions
gh.readgh.issuesgh.prs
890K4.8Claude · Cursor
Brave SearchWeb
by Brave
Web search via Brave API.
Risk score
8
Permissions
net.fetch
612K4.8Claude · Cursor
PostgreSQLData
by Anthropic
Read-only SQL queries against user-supplied database.
Risk score
22
Permissions
db.read
421K4.7Claude · Cursor · Cline
MemorySystem
by Anthropic
Persistent local key-value store for cross-session memory.
Risk score
6
Permissions
fs.readfs.write (scoped)
341K4.6Claude
Shell (basic)System
by Community
Execute shell commands. Requires explicit allow-list.
Risk score
58
Permissions
shell.exec
218K4.2Claude · Cursor
SlackMessaging
by Community
Post messages, read channels with workspace auth.
Risk score
28
Permissions
slack.readslack.write
187K4.5Claude
Desktop CommanderSystem
by Community
Full desktop file + process access. Review permissions carefully.
Risk score
68
Permissions
fs.readfs.writeshell.execprocess.control
124K4Claude
Google DriveStorage
by Community
List and read files with OAuth scopes.
Risk score
26
Permissions
gdrive.read
112K4.4Claude
SentryDev
by Sentry
Read error reports and issue metadata.
Risk score
16
Permissions
sentry.read
92K4.6Claude · Cursor
PuppeteerWeb
by Community
Headless browser automation. Can interact with sensitive sites.
Risk score
54
Permissions
net.fetchbrowser.control
89K4.1Claude · Cursor
NotionNotes
by Community
Read/write Notion pages and databases.
Risk score
24
Permissions
notion.readnotion.write
76K4.5Claude
StripeFinance
by Stripe
Read customers, subscriptions. Write gated by explicit scopes.
Risk score
32
Permissions
stripe.readstripe.write (gated)
68K4.7Claude
LinearPM
by Linear
Read/write issues, projects, cycles.
Risk score
19
Permissions
linear.readlinear.write
54K4.8Claude · Cursor
Email senderComms
by Community
Send emails via SMTP. Requires confirmation mode for production.
Risk score
62
Permissions
email.send
42K3.9Claude
Unrestricted shellSystem
by Community
Shell access with no sandbox. Agent can execute arbitrary commands.
Risk score
94
Permissions
shell.exec (unrestricted)fs.write (unrestricted)net.fetch
18K3.1Claude
Autonomous crypto traderFinance
by Community
Signs and broadcasts on-chain transactions. Private keys stored locally.
Risk score
97
Permissions
crypto.signcrypto.broadcastnet.fetch
4K2.8Claude