FilesystemSystem
by Anthropic
Read/write files within allow-listed directories.
Risk score
12
Permissions
fs.readfs.write (scoped)
1.2M · ★ 4.9Claude · Cursor · VSCode
Every server, safety-graded
18 MCP servers across development, data, messaging, and system categories. Each reviewed against a 45-check permission matrix and assigned a tier: SAFE, CAUTION, or DANGER.
18 ENTRIES · REFRESHED WEEKLY
SAFE
GitHubDev
by Anthropic
Read repos, issues, PRs. Write requires explicit scope.
Risk score
18
Permissions
gh.readgh.issuesgh.prs
890K · ★ 4.8Claude · Cursor
PostgreSQLData
by Anthropic
Read-only SQL queries against user-supplied database.
Risk score
22
Permissions
db.read
421K · ★ 4.7Claude · Cursor · Cline
Brave SearchWeb
by Brave
Web search via Brave API.
Risk score
8
Permissions
net.fetch
612K · ★ 4.8Claude · Cursor
FetchWeb
by Anthropic
Fetch URLs and extract text content.
Risk score
14
Permissions
net.fetch
980K · ★ 4.9Claude · Cursor · VSCode
MemorySystem
by Anthropic
Persistent local key-value store for cross-session memory.
Risk score
6
Permissions
fs.readfs.write (scoped)
341K · ★ 4.6Claude
SlackMessaging
by Community
Post messages, read channels with workspace auth.
Risk score
28
Permissions
slack.readslack.write
187K · ★ 4.5Claude
SentryDev
by Sentry
Read error reports and issue metadata.
Risk score
16
Permissions
sentry.read
92K · ★ 4.6Claude · Cursor
StripeFinance
by Stripe
Read customers, subscriptions. Write gated by explicit scopes.
Risk score
32
Permissions
stripe.readstripe.write (gated)
68K · ★ 4.7Claude
LinearPM
by Linear
Read/write issues, projects, cycles.
Risk score
19
Permissions
linear.readlinear.write
54K · ★ 4.8Claude · Cursor
Google DriveStorage
by Community
List and read files with OAuth scopes.
Risk score
26
Permissions
gdrive.read
112K · ★ 4.4Claude
NotionNotes
by Community
Read/write Notion pages and databases.
Risk score
24
Permissions
notion.readnotion.write
76K · ★ 4.5Claude
Shell (basic)System
by Community
Execute shell commands. Requires explicit allow-list.
Risk score
58
Permissions
shell.exec
218K · ★ 4.2Claude · Cursor
PuppeteerWeb
by Community
Headless browser automation. Can interact with sensitive sites.
Risk score
54
Permissions
net.fetchbrowser.control
89K · ★ 4.1Claude · Cursor
Email senderComms
by Community
Send emails via SMTP. Requires confirmation mode for production.
Risk score
62
Permissions
email.send
42K · ★ 3.9Claude
Desktop CommanderSystem
by Community
Full desktop file + process access. Review permissions carefully.
Risk score
68
Permissions
fs.readfs.writeshell.execprocess.control
124K · ★ 4Claude
Unrestricted shellSystem
by Community
Shell access with no sandbox. Agent can execute arbitrary commands.
Risk score
94
Permissions
shell.exec (unrestricted)fs.write (unrestricted)net.fetch
18K · ★ 3.1Claude
Autonomous crypto traderFinance
by Community
Signs and broadcasts on-chain transactions. Private keys stored locally.
Risk score
97
Permissions
crypto.signcrypto.broadcastnet.fetch
4.2K · ★ 2.8Claude