No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by Azure-Samples · MCP Server · ★ 114
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is snippy safe to install? View the security audit →
Snippy is an Azure Functions-based reference application that demonstrates how to build MCP (Model Context Protocol) tools that integrate with AI assistants like GitHub Copilot. It showcases a modern serverless AI application architecture where Azure Functions serve as both traditional APIs and MCP-compatible tools that AI assistants can discover and use.  - Record and replay user interactions in the browser with MCP support
开盒即用的优雅管理mcp服务 | 结合Agent框架 | 作者听劝 | 已发布pypi | Vue页面demo
Postman MCP Server — connect AI agents (Claude Code, Cursor, VS Code Copilot, Gemini CLI) to your Postman coll
ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agent
🤖 Taskade MCP · Official MCP server and OpenAPI to MCP codegen. Build AI agent tools from any OpenAPI API and
Explore other popular mcp server tools:
snippy is 🧩 Build AI-powered MCP Tools with Azure Functions, Durable Agents & Cosmos vector search. Features orchestrated multi-agent workflows using OpenAI.. It is categorized as a MCP Server with 114 GitHub stars.
snippy is primarily written in Python. It covers topics such as ai-agents, azure-functions, copilot.
You can find installation instructions and usage details in the snippy GitHub repository at github.com/Azure-Samples/snippy. The project has 114 stars and 1222 forks, indicating an active community.
snippy is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to snippy on Agent Skills Hub include roam-code, web-agent-protocol, mcpstore. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: