An MCP server whose confirmation cannot be replayed against a different call.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
An MCP server whose confirmation cannot be replayed against a different call.
An MCP server that can delete directories, and the guard rails that make that acceptable.
A read-only Postgres MCP server that parses SQL rather than pattern-matching it.