Install payload
Install payload is broadly covered in current results.
83% (10/12)
Source-backed filter active — add entries to compare trust side by side.
18 results in this view
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
83% (10/12)
Adoption queue
2/18 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/agentgateway-mcp-gateway · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/archestra-mcp-platform · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/astro-repository-contributor-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/database-migration-safety-gate · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/unsafe-shell-command-blocker-hook · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/environment-variable-leak-warning-hook · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/mcp-installer-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/mcp-use-mcp-apps-builder-skill · trust review · confidence 67%
Decision confidence
2/18 results are low-confidence and need review before adoption.
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/agentgateway-mcp-gateway · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/archestra-mcp-platform · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/astro-repository-contributor-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/database-migration-safety-gate · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/unsafe-shell-command-blocker-hook · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/environment-variable-leak-warning-hook · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/mcp-installer-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
skills/mcp-use-mcp-apps-builder-skill · trust review
Freshness distribution
Median age 52 days; all 12 scanned entries are within 90 days.
Theme distribution
63 distinct themes with no dominant one. Most common: agents, guardrails, mcp.
63 distinct themes across 18 scanned
Open-source Python framework for adding input and output guards, validators, structured generation, and policy checks to LLM applications.
Open-source AI gateway from Portkey for routing to 1600+ LLMs through one OpenAI-compatible API, with automatic retries, fallbacks, load balancing, conditional routing, guardrails, caching, and observability, self-hostable via npx, Docker, or edge deployments.
Official JavaScript and TypeScript framework for building multi-agent workflows with agents, tools, handoffs, guardrails, sessions, tracing, realtime voice agents, MCP tools, hosted tools, and sandbox agents.
Official Python framework for building multi-agent workflows with agents, tools, handoffs, guardrails, sessions, tracing, realtime voice agents, MCP tools, hosted tools, human-in-the-loop flows, and sandbox agents.
Open-source TypeScript agent engineering framework and platform for building AI agents with tools, memory, workflows, RAG, guardrails, evals, MCP, voice, and VoltOps observability.
PreToolUse Bash guardrail implementing the Claude Code hooks guide drop-table example: exit 2 with stderr feedback when Bash command text contains a case-insensitive DROP TABLE pattern.
Apache-2.0 agentic proxy that can expose stdio, HTTP, SSE, and Streamable HTTP MCP servers through a managed gateway with federation, OAuth/JWT authentication, RBAC/CEL policy, CORS, TLS, observability, and Kubernetes Gateway API support.
MCP server that lets Claude install other MCP servers into Claude Desktop by writing MCP config entries for npm packages, uvx packages, or locally cloned Node-based MCP server projects.
Source-backed Claude agent prompt for contributing to the official Astro monorepo using its AGENTS.md guidance, pnpm workspace commands, package-local testing, bgproc dev server management, agent-browser UI checks, and Astro docs sources.
Source-backed Claude agent prompt for contributing to the official vercel/next.js monorepo using its AGENTS.md guidance, pnpm workspace commands, package-filtered builds, Turbopack and Rust boundaries, mode-specific tests, PR triage rules, and secrets-safety notes.
Source-backed specialist agent for designing and reviewing production OpenAI Agents SDK workflows, including agents, runners, tools, handoffs, guardrails, sessions, tracing, MCP integrations, sandbox agents, and deployment safety.
PreToolUse hook that scans proposed writes to prompt, agent, rule, markdown, and context files for common prompt-injection phrases before the content is saved into an AI-readable surface.
PreToolUse hook that inspects a database migration before it is written and blocks irreversible or lock-heavy operations — DROP TABLE/COLUMN, TRUNCATE, table/column RENAME, and CREATE INDEX without CONCURRENTLY — following the strong_migrations safe-migration checks.
PreToolUse hook that scans the exact text Claude Code is about to write or edit for high-confidence secret formats (AWS access keys, GitHub tokens, OpenAI keys, Slack tokens, Google API keys, Stripe keys, and private key blocks) and blocks the write with a non-zero exit before the secret ever reaches disk.
AGPL-licensed MCP-native platform with a private MCP registry, MCP gateway, Kubernetes MCP orchestrator, access control, credential resolution, observability, and deterministic tool guardrails for shared AI deployments.
Agent Skill from mcp-use for building production MCP servers and MCP Apps with tools, resources, prompts, widgets, authentication, deployment, inspector testing, and framework-specific guardrails.
Open-source Python and TypeScript SDK for building model-driven AI agents with any model provider, MCP tools, streaming, multi-agent patterns, structured output, observability, hooks, guardrails, and production deployment guidance.
PreToolUse Write and Edit guardrail combining the hooks guide protected-file pattern with a local scan for common hardcoded credential shapes called out by GitHub secret scanning guidance before content is written.