No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by basementstudio · MCP Server · ★ 1.3k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is xmcp safe to install? View the security audit →
xmcp The TypeScript MCP Framework is a framework for building and shipping MCP servers with TypeScript. Designed with DX in mind, it streamlines development and lowers the barrier to entry for anyone looking to create and deploy powerful tools on top of the Model Context Protocol ecosystem. Getting Started Bootstrap your first application with: or initialize on an existing Next.js or Express project with: Features ⊹ File System Routing - Tools and prompts are auto-registered from a and directory\
| Stars | 1,332 |
| Forks | 92 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 63.2032770432074/100 |
| Open Issues | 25 |
| Last Updated | 2026-09-22 |
| Created | 2025-05-17 |
| Platforms | mcp, node |
| Est. Tokens | ~14k |
Looking for a xmcp alternative? If you're comparing xmcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The Typescript MCP Framework
A mcp server to allow LLMS gain context about shadcn ui component structure,usage and installation,compaitable
A Minecraft MCP Server powered by Mineflayer API. It allows to control a Minecraft character in real-time, all
MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container de
OpenClaw-inspired autonomous AI agent built entirely in n8n. Adaptive RAG-powered memory, Skills via MCP templ
An event-driven framework designed to build and orchestrate multi-agent AI systems. It enables seamless integr
Explore other popular mcp server tools:
xmcp is The TypeScript MCP framework. It is categorized as a MCP Server with 1.3k GitHub stars.
xmcp is primarily written in TypeScript. It covers topics such as framework, mcp, modelcontextprotocol.
You can find installation instructions and usage details in the xmcp GitHub repository at github.com/basementstudio/xmcp. The project has 1.3k stars and 92 forks, indicating an active community.
xmcp is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to xmcp on Agent Skills Hub include mcp-framework, shadcn-ui-mcp-server, minecraft-mcp-server. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: