MCP servers with a medium-severity advisory Servers carrying at least one applicable advisory rated MEDIUM. Worth reading alongside the permission surface on each server’s page: the same finding matters more on a server that reaches the filesystem or the network than on one that does not.
awslabs Open source MCP Servers for AWS
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
untrusted content
(inferred)
stdio E 356t
☆
compare
sooperset MCP server for Atlassian tools (Confluence, Jira)
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
stdio E 96t
☆
compare
IBM An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio E 61t
☆
compare
electerm 📻Free and open-sourced terminal/ssh/sftp/ftp/telnet/serialport/RDP/VNC/Spice client(Linux, Mac, Windows, Android, HarmonyOS, iOS)
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio E 40t
☆
compare
strands-agents A set of tools that gives agents powerful capabilities.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
database
(inferred)
untrusted content
(inferred)
streamable-http E 37t
☆
compare
ogham-mcp Shared memory MCP server — persistent, searchable, cross-client Claude, Opencode
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio C 31t
☆
compare
sonirico Give hands to AI. MCP server to run shell commands securely, auditably, and on demand.
filesystem
(inferred)
stdio C 29t
☆
compare
Wolfe-Jam Persistent Project Context for Claude — IANA-registered .faf format · Core 14 MCP tools (30 with FAF_TOOLS=all) + 2 prompts · MCP Registry #2759
filesystem
(inferred)
network
(inferred)
untrusted content
(inferred)
stdio B 23t
☆
compare
ondata MCP server for querying CKAN open data portals (package search, DataStore SQL, organizations, groups, tags)
network
(inferred)
stdio D 20t
☆
compare
Wolfe-Jam Persistent Project Context for xAI Grok — IANA-registered .faf format · MCP server on a URL
filesystem
(inferred)
shell / exec
(inferred)
database
(inferred)
stdio B 19t
☆
compare
github fabionfsc/nuzo-memory
verified — a relayed third-party claim (registry/vendor), not the
observatory's own endorsement
fabionfsc Local-first, auditable memory for Codex, Claude Code, and MCP-compatible AI agents.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio C 19t
☆
compare
icip-cas An Agentic Framework for Reflective PowerPoint Generation
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio D 18t
☆
compare
flipped-aurora 🚀Vite+Vue3+Gin拥有AI辅助的基础开发平台，企业级业务AI+开发解决方案，内置mcp辅助服务，内置skills管理，支持TS和JS混用。它集成了JWT鉴权、权限管理、动态路由、显隐可控组件、分页封装、多点登录拦截、资源权限、上传下载、代码生成器、表单生成器和可配置的导入导出等开发必备功能。
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
— D 11t
☆
compare
SethGammon The operating layer for Claude Code + OpenAI Codex: persistent project memory, intent routing, safety hooks, cost telemetry, and parallel agent fleets.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio C 9t
☆
compare
yamadashy 📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for when you need to feed your codebase to Large Language Models (LLMs) or other AI tools like Claude, ChatGPT, DeepSeek, Perplexity, Gemini, Gemma, Llama, Grok, and more.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio D 8t
☆
compare
PrefectHQ 🚀 The fast, Pythonic way to build MCP servers and clients.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio E 7t
☆
compare
compiler-explorer Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
streamable-http B 7t
☆
compare
jlowin no description
stdio C 7t
☆
compare
github vshulcz/deja-vu
verified — a relayed third-party claim (registry/vendor), not the
observatory's own endorsement
vshulcz One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.
filesystem
(inferred)
database
(inferred)
stdio B 7t
☆
compare