by spring-attic · MCP Server · ★ 204
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 204 |
| Forks | 50 |
| Language | Java |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 76/100 |
| Open Issues | 5 |
| Last Updated | 2025-02-14 |
| Created | 2024-12-06 |
| Platforms | java, mcp |
| Est. Tokens | ~259k |
NOTE: This project has been graduated and moved to the MCP Java SDK and Spring AI MCP. See you there! This repository is now archived. Java & Spring MCP Set of projects that provide Java SDK and Spring Framework integration for the Model Context Protocol.
These tools work well together with spring-ai-mcp for enhanced workflows:
Looking for a spring-ai-mcp alternative? If you're comparing spring-ai-mcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Spring Boot Starter: Auto-convert existing REST APIs (@RestController) to MCP Server with zero/low-code. Expos
A robust enterprise application sample (deployed on ACA) that leverages MCP and multiple AI agents orchestrate
Spring Explyt is a free, open-source (Apache-2.0) Spring and Spring Boot plugin for IntelliJ IDEA Community Ed
编程导航 2025 年 AI 开发实战新项目,基于 Spring Boot 3 + Java 21 + Spring AI 构建 AI 恋爱大师应用和 ReAct 模式自主规划智能体YuManus,覆盖 AI 大模型接入
Codebase intelligence for AI. Detects patterns & conventions + remembers decisions across sessions. MCP server
TDA - Thread Dump Analyzer (for Java). Analyze your Thread Dumps with a GUI or use it as MCP Server.
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: