by stacklok · MCP Server · ★ 29
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 29 |
| Forks | 15 |
| Language | Go |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 71/100 |
| Open Issues | 29 |
| Last Updated | 2026-10-14 |
| Created | 2025-10-10 |
| Platforms | go, mcp |
| Est. Tokens | ~19k |
Discover, govern and control access to MCP servers and agent skills across your organization
These tools work well together with toolhive-registry-server for enhanced workflows:
Looking for a toolhive-registry-server alternative? If you're comparing toolhive-registry-server with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
MCP Security Solution for Agentic AI — real-time proxying, behavior analysis, and malicious tool detection
AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (
Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTT
Neuronto Agentic Resource Discovery (ARD) Index. Federated search across every public ARD registry, plus a ver
Magg: The MCP Aggregator
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: