No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by MCP-Club · MCP Server · ★ 106
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is mcpm safe to install? View the security audit →
MCPM CLI A command-line tool for managing MCP servers in Claude App. Highlights 🚀 Easy Server Management: Add, remove, and manage multiple MCP servers in Claude App with simple commands 🔄 Server Status Control: Enable/disable servers and view their status at any time 🛠️ Interactive CLI: User-friendly command-line interface with interactive prompts for easy configuration 🔌 Self-Integration: Can add MCPM CLI itself as a MCP server with a single command 📝 JSON Configuration: Manages servers through Claude's configuration file with proper error handling 🔍 Package Discovery: Search and discover MCP packages from the community RoadMap -
| Stars | 106 |
| Forks | 28 |
| Language | TypeScript |
| Category | MCP Server |
| License | AGPL-3.0 |
| Quality Score | 75.6759184996073/100 |
| Open Issues | 3 |
| Last Updated | 2025-01-06 |
| Created | 2024-12-17 |
| Platforms | claude-code, cli, mcp, node |
| Est. Tokens | ~90k |
These tools work well together with mcpm for enhanced workflows:
Looking for a mcpm alternative? If you're comparing mcpm with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
mcpc is a CLI client for MCP. It supports persistent sessions, stdio/HTTP, OAuth 2.1, JSON output for code mod
Connect RStudio to Claude Code, Codex, Gemini, and other LLM agents via MCP. Multi-agent orchestration, automa
Drive the Unity Editor from an AI agent or the terminal. The Editor serves MCP itself over HTTP, so there is n
Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces,
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 comman
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug
Explore other popular mcp server tools:
mcpm is A command-line tool for managing MCP servers in Claude App. Also can run a MCP Server to help you manage all your MCP Servers. It is categorized as a MCP Server with 106 GitHub stars.
mcpm is primarily written in TypeScript. It covers topics such as claude, cli, mcp.
You can find installation instructions and usage details in the mcpm GitHub repository at github.com/MCP-Club/mcpm. The project has 106 stars and 28 forks, indicating an active community.
mcpm is released under the AGPL-3.0 license, making it free to use and modify according to the license terms.
The top alternatives to mcpm on Agent Skills Hub include mcp-cli, ClaudeR, UnityMCP. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: