# MCP tool packages

MCP packages expose local tools, data, and service connectors to AI agents through Model Context Protocol servers or clients.

- **Packages:** 356
- **Protected tools:** 0
- **Approval gates:** 1
- **Non-low risk:** 49
- **Updated:** 2026-08-03

## Why this package group is here

MCP tool packages currently includes 356 package catalog entries. 0 have protected-tool coverage, 1 have approval-gate metadata, and 49 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [gemini-cli](https://pkg.so/pkg/brew/gemini-cli/) - 5 approval-gate rules are present.
- [llvm](https://pkg.so/pkg/brew/llvm/) - compiler and toolchain runtime
- [nono](https://pkg.so/pkg/brew/nono/) - generalized runtime or code generation signal
- [docker-agent](https://pkg.so/pkg/brew/docker-agent/) - generalized runtime or code generation signal
- [xgo](https://pkg.so/pkg/brew/xgo/) - generalized runtime or code generation signal
- [qqqa](https://pkg.so/pkg/brew/qqqa/) - generalized runtime or code generation signal
- [wassette](https://pkg.so/pkg/brew/wassette/) - generalized runtime or code generation signal
- [opencode](https://pkg.so/pkg/brew/opencode/) - no executable entrypoint in the package index
- [llama.cpp](https://pkg.so/pkg/brew/llama-cpp/) - no executable entrypoint in the package index
- [openai-whisper](https://pkg.so/pkg/brew/openai-whisper/) - no executable entrypoint in the package index
- [rtk](https://pkg.so/pkg/brew/rtk/) - no executable entrypoint in the package index
- [openvino](https://pkg.so/pkg/brew/openvino/) - narrow executable package without higher-risk signals
- [opencv](https://pkg.so/pkg/brew/opencv/) - no executable entrypoint in the package index
- [pytorch](https://pkg.so/pkg/brew/pytorch/) - no executable entrypoint in the package index
- [mlx](https://pkg.so/pkg/brew/mlx/) - narrow executable package without higher-risk signals
- [qwen-code](https://pkg.so/pkg/brew/qwen-code/) - no executable entrypoint in the package index
- [llmfit](https://pkg.so/pkg/brew/llmfit/) - no executable entrypoint in the package index
- [hf](https://pkg.so/pkg/brew/hf/) - no executable entrypoint in the package index
- [summarize](https://pkg.so/pkg/brew/summarize/) - no executable entrypoint in the package index
- [block-goose-cli](https://pkg.so/pkg/brew/block-goose-cli/) - no executable entrypoint in the package index
- [agent-browser](https://pkg.so/pkg/brew/agent-browser/) - no executable entrypoint in the package index
- [pi-coding-agent](https://pkg.so/pkg/brew/pi-coding-agent/) - no executable entrypoint in the package index
- [worktrunk](https://pkg.so/pkg/brew/worktrunk/) - no executable entrypoint in the package index
- [beads](https://pkg.so/pkg/brew/beads/) - no executable entrypoint in the package index
- [openclaw-cli](https://pkg.so/pkg/brew/openclaw-cli/) - no executable entrypoint in the package index
- [fabric-ai](https://pkg.so/pkg/brew/fabric-ai/) - narrow executable package without higher-risk signals
- [llm](https://pkg.so/pkg/brew/llm/) - no executable entrypoint in the package index
- [specify](https://pkg.so/pkg/brew/specify/) - no executable entrypoint in the package index
- [repomix](https://pkg.so/pkg/brew/repomix/) - narrow executable package without higher-risk signals
- [aider](https://pkg.so/pkg/brew/aider/) - narrow executable package without higher-risk signals
- [mistral-vibe](https://pkg.so/pkg/brew/mistral-vibe/) - no executable entrypoint in the package index
- [ccusage](https://pkg.so/pkg/brew/ccusage/) - no executable entrypoint in the package index
- [ramalama](https://pkg.so/pkg/brew/ramalama/) - no executable entrypoint in the package index
- [kimi-cli](https://pkg.so/pkg/brew/kimi-cli/) - no executable entrypoint in the package index
- [hermes-agent](https://pkg.so/pkg/brew/hermes-agent/) - no executable entrypoint in the package index
- [github-mcp-server](https://pkg.so/pkg/brew/github-mcp-server/) - no executable entrypoint in the package index
- [mcp-toolbox](https://pkg.so/pkg/brew/mcp-toolbox/) - no executable entrypoint in the package index
- [aichat](https://pkg.so/pkg/brew/aichat/) - narrow executable package without higher-risk signals
- [promptfoo](https://pkg.so/pkg/brew/promptfoo/) - no executable entrypoint in the package index
- [claude-squad](https://pkg.so/pkg/brew/claude-squad/) - narrow executable package without higher-risk signals
- [backlog-md](https://pkg.so/pkg/brew/backlog-md/) - no executable entrypoint in the package index
- [n8n-mcp](https://pkg.so/pkg/brew/n8n-mcp/) - no executable entrypoint in the package index
- [skillshare](https://pkg.so/pkg/brew/skillshare/) - no executable entrypoint in the package index
- [gastown](https://pkg.so/pkg/brew/gastown/) - narrow executable package without higher-risk signals
- [localai](https://pkg.so/pkg/brew/localai/) - no executable entrypoint in the package index
- [rulesync](https://pkg.so/pkg/brew/rulesync/) - no executable entrypoint in the package index
- [openspec](https://pkg.so/pkg/brew/openspec/) - narrow executable package without higher-risk signals
- [playwright-mcp](https://pkg.so/pkg/brew/playwright-mcp/) - no executable entrypoint in the package index
- [libtensorflow](https://pkg.so/pkg/brew/libtensorflow/) - library-like package without higher-risk signals
- [skills](https://pkg.so/pkg/brew/skills/) - no executable entrypoint in the package index
- [sentencepiece](https://pkg.so/pkg/brew/sentencepiece/) - narrow executable package without higher-risk signals
- [aoe](https://pkg.so/pkg/brew/aoe/) - no executable entrypoint in the package index
- [oh-my-agent](https://pkg.so/pkg/brew/oh-my-agent/) - no executable entrypoint in the package index
- [oterm](https://pkg.so/pkg/brew/oterm/) - no executable entrypoint in the package index
- [chrome-devtools-mcp](https://pkg.so/pkg/brew/chrome-devtools-mcp/) - no executable entrypoint in the package index
- [mcp-grafana](https://pkg.so/pkg/brew/mcp-grafana/) - no executable entrypoint in the package index
- [gollama](https://pkg.so/pkg/brew/gollama/) - narrow executable package without higher-risk signals
- [claude-code-router](https://pkg.so/pkg/brew/claude-code-router/) - narrow executable package without higher-risk signals
- [context7-mcp](https://pkg.so/pkg/brew/context7-mcp/) - no executable entrypoint in the package index
- [fastmcp](https://pkg.so/pkg/brew/fastmcp/) - no executable entrypoint in the package index
- [mcpm](https://pkg.so/pkg/brew/mcpm/) - no executable entrypoint in the package index
- [whisperkit-cli](https://pkg.so/pkg/brew/whisperkit-cli/) - narrow executable package without higher-risk signals
- [langgraph-cli](https://pkg.so/pkg/brew/langgraph-cli/) - no executable entrypoint in the package index
- [mcp-publisher](https://pkg.so/pkg/brew/mcp-publisher/) - no executable entrypoint in the package index
- [e2b](https://pkg.so/pkg/brew/e2b/) - narrow executable package without higher-risk signals
- [mcp-proxy](https://pkg.so/pkg/brew/mcp-proxy/) - no executable entrypoint in the package index
- [letta-code](https://pkg.so/pkg/brew/letta-code/) - no executable entrypoint in the package index
- [claude-cmd](https://pkg.so/pkg/brew/claude-cmd/) - narrow executable package without higher-risk signals
- [aicommit2](https://pkg.so/pkg/brew/aicommit2/) - no executable entrypoint in the package index
- [vtcode](https://pkg.so/pkg/brew/vtcode/) - no executable entrypoint in the package index
- [mcp-atlassian](https://pkg.so/pkg/brew/mcp-atlassian/) - no executable entrypoint in the package index
- [crit](https://pkg.so/pkg/brew/crit/) - no executable entrypoint in the package index