MCP servers with a low-severity advisory

25 servers tracked

Servers carrying at least one applicable advisory rated LOW. Listed for completeness rather than urgency — a low rating is the publisher’s judgement about the flaw, not about how the server is deployed.

Coding-Dev-Tools

Local-first, inspectable memory for coding agents: durable context across sessions and repositories, code-aware recall, bi-temporal history, MCP, and a self-hosted WebUI.

stdio C 40 tools
ondata

MCP server for querying CKAN open data portals (package search, DataStore SQL, organizations, groups, tags)

stdio D 20 tools
github fabionfsc/nuzo-memory verified — a relayed third-party claim (registry/vendor), not the observatory's own endorsement
fabionfsc

Local-first, auditable memory for Codex, Claude Code, and MCP-compatible AI agents.

stdio C 19 tools
ridafkih

Calendar sync tool & universal calendar MCP server. Aggregate, sync and control calendars on Google, Outlook, Office 365, iCloud, CalDAV or ICS.

stdio B 14 tools
PrefectHQ

🚀 The fast, Pythonic way to build MCP servers and clients.

stdio E 7 tools
jlowin

no description

stdio C 7 tools
julien040

One SQL interface for 60+ tools (e.g., GitHub, Notion, Airtable). Plug into any LLM through MCP.

— D 3 tools
WordPress

AI features and experiments for WordPress. Modular framework for testing AI capabilities.

— A 0 tools
activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

— C 0 tools
dagucloud

Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.

— E 0 tools
deepset-ai

Open-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.

— ungraded 0 tools
github gowrishankar-infra/sabline-lang verified — a relayed third-party claim (registry/vendor), not the observatory's own endorsement
gowrishankar-infra

Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.

stdio E 0 tools
labring

FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.

streamable-http D 0 tools
langgenius

Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.

— C 0 tools
lobehub

🤯 LobeHub is your Chief Agent Operator, organizing your agents into 7×24 operations by hiring, scheduling, and reporting on your entire AI team.

— C 0 tools
markmhendrickson

Shared, governed system of record for human-agent systems

— ungraded 0 tools
n8n-io

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

— C 0 tools
github nhost/nhost verified — a relayed third-party claim (registry/vendor), not the observatory's own endorsement
nhost

Let your users work with their own data through an AI assistant, limited to what they can see.

— C 0 tools
open-webui

User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

stdio E 0 tools
reolink

Official command-line tool for Reolink IP cameras, doorbells and NVRs — LAN only, no cloud. Snapshots, PTZ, RTSP/RTMP stream URLs, two-way audio (talkback/TTS), motion and AI detection, event monitoring, VOD download. JSON output and a built-in MCP server. Works with Home Assistant, Frigate and go2rtc.

— A 0 tools