70 tools that speak the Model Context Protocol, curated: Agentic Inbox (Cloudflare — self-hostable AI email agent), awesome-mcp-servers, Alook. Every entry lists license, pricing, and links.
Agentic Inbox (Cloudflare — self-hostable AI email agent)· tool, 2026-10-19 Apache-2.0, self-hostable email client with a built-in AI agent that runs entirely on Cloudflare Workers: it drafts replies with human-in-the-loop review using the Cloudflare Agents SDK and Workers AI, so a lean team can own an agentic inbox on infrastructure it controls instead of renting a closed AI-email SaaS seat.
awesome-mcp-servers· tool, 2026-10-11 Community-curated, MIT-licensed directory of Model Context Protocol servers spanning dozens of categories (browser automation, cloud infra, databases, design, research, media, dev tools) — a single discovery index instead of hunting GitHub topic tags for MCP integrations.
Alook· tool, 2026-10-09 Open-source collaboration layer where local coding agents (Claude Code, Codex, Cursor, OpenCode, Pi) get persistent identities and join Discord-style team rooms, addressable with an @-mention instead of a terminal copy-paste. Agents run on your own machine; Alook only connects them.
OpenSEO· tool, 2026-10-09 Self-hostable, open-source alternative to Semrush/Ahrefs (MIT): keyword research, rank tracking, backlinks, and site audits, with a first-class MCP + AI-skills surface. Bring your own DataForSEO key; no forced subscription. Docker/Cloudflare self-host, or a $10/month hosted plan.
ADR (Agentic AI Detection and Response)· tool, 2026-10-07 ADR (Agentic AI Detection and Response) is Uber's open-source platform for securing the AI agents a team runs: Discovery inventories the AI apps, agents, runtimes, and MCP servers on an endpoint; a Sensor normalizes telemetry from Claude Code, Cursor, Codex, Copilot CLI, and DeepSeek Harness; and a dual-agent Detection layer triages suspicious sessions. Ships ADR-Bench (300+ tasks, 134 MCP servers, 17 attack techniques). Apache-2.0; self-hostable. Free. In production at Uber; MLSys 2026.
Clai· tool, 2026-10-03 Clai is an open-source command-line AI harness for terminal power users: context-engineering and agent workflows you run as a standalone CLI or embed as a Go package. Open source: yes (MIT); self-hostable. Free OSS; ~145 stars; established and active (~925 commits since 2024).
OpenDots (CopilotKit)· tool, 2026-10-03 OpenDots is CopilotKit's open-source template for persistent, always-on AI agents that each get their own computer and move between text, calls, and Slack, on web and mobile. Open source: yes (MIT); self-hostable; bring your own OpenAI-compatible model. Free OSS; ~2.2k stars; new (~18 commits). Distinct from the separately-listed anil-matcha/open-dots.
Nanobrowser· tool, 2026-10-02 Nanobrowser is an open-source Chrome extension for AI-powered web automation: it runs multi-agent workflows inside your own browser using your own LLM API key, positioned as an alternative to OpenAI Operator. Open source: yes (Apache-2.0); self-hostable (runs in your browser, bring your own key). Free OSS; ~13.9k stars; active (~376 commits).
RRSI· tool, 2026-10-01 RRSI (Regularized Recursive Self-Improvement) is a Google Research framework that lets an LLM agent evolve its own harness — prompts, control flow, tools, memory, skills, sub-agents — around a frozen model, while a regularized search curbs the overfitting that plain harness-evolution produces on the training tasks. Open source: yes (Apache-2.0); self-hostable. Free OSS; ~1.1k stars; paper-backed (arXiv 2609.24972).
Mingbird· tool, 2026-09-30 Mingbird is a local-first agent harness that gets small 2–9B models to finish real multi-step tasks on an ordinary laptop, running offline against a local Ollama backend. Open source: yes (Apache-2.0); self-hostable (local Ollama; one-click zero-outbound mode; config in ~/.ollama_agent/config.json). Free OSS; ~1 star (brand-new, created 2026-09-17); active (30 commits, v1.8.2, 461-test suite, CI on Linux/macOS).
Open Dots· tool, 2026-09-30 Open Dots is a self-hosted AI agent workspace — chat, tool integration, and optional computer automation — with a deny-by-default gateway that pauses higher-risk actions for explicit human approval before they run. Open source: yes (MIT); self-hostable. Free OSS; ~4.8k stars; active (104 commits). An OSS alternative to hosted 'Dots'-style agent workspaces.
agent-custody· tool, 2026-09-28 agent-custody is a chain-of-custody layer for AI agents: signed receipts for every tool call, a Cedar-policy MCP gateway, a Merkle tamper-evident transparency log, and offline/browser verifiers, with adapters for LangChain, OpenAI Agents SDK, and Claude Agent SDK. Open source: yes (Apache-2.0); self-hostable; freemium. Active (~217 commits, 0.6.x).
Charter· tool, 2026-09-28 Charter is a Python library that lets you declare agent API tools as Pydantic schemas instead of hand-implementing them, auto-handling request construction, auth, wire format, and response trimming. Open source: yes (Apache-2.0); self-hostable; pricing free. In-process, no telemetry; launched 2026-09-28; 1 star.
Open-Agent-DB· tool, 2026-09-28 Open-Agent-DB is an offline-first catalog and search engine for AI agent skills, MCP servers, and project directives, queryable via `npx open-agent-db search` with full-text (SQLite FTS5) and dense-vector semantic search. Open source: yes (MIT); self-hostable; pricing free. Local SQLite, offline-first; launched 2026-09-28.
OpenAPPA· tool, 2026-09-28 OpenAPPA is a deterministic guardrail layer that intercepts agent tool calls and verifies data flows against declarative policies, blocking data exfiltration from prompt injection or hallucination without breaking agent function. Open source: yes (MIT); self-hostable; pricing free. Runs in-process; 26 stars; active.
SurfSense· tool, 2026-09-28 SurfSense is an air-gapped, open-source (Apache-2.0) NotebookLM alternative: an AI research app that parses, indexes and embeds your documents entirely on your own machine (local SQLite, no telemetry), then generates summaries, reports, slides, podcasts and study guides. SurfSense AI runs on local models or any OpenAI-compatible API, and ships an MCP server for connecting external sources.
browser-session-ctl· tool, 2026-09-27 browser-session-ctl is a Chrome extension plus local sidecar that lets shell commands click, type in, and read your existing logged-in browser session, for use with Claude. Open source: yes (GPL-3.0-or-later); self-hostable; pricing free. Localhost-only, JavaScript, 27 commits.
Chimera· tool, 2026-09-27 Chimera is a local-first workspace where AI agents propose actions classified auto, confirm, or blocked, with every decision written to a tamper-evident audit chain. Open source: yes (Apache-2.0); self-hostable; pricing free. Model-independent (Codex, Claude Code, Bedrock, OpenRouter); source beta.
Provenance Gate· tool, 2026-09-27 Provenance Gate is a deterministic authorization gateway that tracks where each tool-call value originated so an AI agent cannot act on untrusted data in side-effect operations. Open source: yes (Apache-2.0); self-hostable; pricing free. Early PoC; runs as a Claude Code plugin.
swe-mux· tool, 2026-09-27 swe-mux is a terminal multiplexer that runs multiple coding agents (Claude Code, Codex) side by side with live per-session status, reachable from a phone over Tailscale. Open source: yes (Apache-2.0); self-hostable; pricing free. Python 3.12+, PyPI wheel, 6 stars, fresh.
Quiver GTM· tool, 2026-09-26 Quiver GTM is a developer marketing command center with draft/review/live content states, version control, a Content API and MCP access. Open source: yes (MIT self-hosted edition); also offered as a hosted product. 22 stars, but the OSS repo is stale (last push 2026-07-20). Pricing on its Product Hunt launch is undisclosed.
ToolHive Registry Catalog· tool, 2026-09-26 Open-source registry catalog of MCP servers from Stacklok (Apache-2.0). Demonstrates twin catalog streams — servers for executable components and skills for reusable prompt workflows — with an allowedTools array that bounds which tools a skill may invoke, keeping agent execution scoped.
October Bus· tool, 2026-09-26 A local-first coordination layer for AI agents and harnesses (Apache-2.0): agents discover peers, exchange durable messages, delegate work, coordinate shared tasks, and request human input — with delivery guarantees, identity management, and no cloud control plane. Go daemon + SQLite, TypeScript SDK, MCP bindings.
Ctxfw· tool, 2026-09-25 Ctxfw is an Apache-2.0, in-memory Tree-Sitter AST 'context firewall' — an MCP server that prunes what a coding agent sends to the model, trimming the code context down before it costs tokens. It is on PyPI and self-hostable. It is nascent (2 stars). Its headline '-72.4% token mass' figure is a self-reported, unbenchmarked project claim, not a measured result.
oh-my-subagents· tool, 2026-09-25 oh-my-subagents is local subagent orchestration for Codex and Claude — persistent task state, reusable teams, and interruption recovery. Its licensing is split, not simply 'open source': the core orchestration code is MIT, but the Console UI is source-available under the n8n-derived Sustainable Use License v1.0 (internal/non-commercial use only; no commercial redistribution), which is not OSI-open. It has 142 stars.
Sifthound· tool, 2026-09-25 Sifthound is an MIT-licensed, self-hosted web search / extract / crawl / map API for AI agents, exposing a Tavily-compatible interface plus an MCP server. It is brand-new and unproven — created 2026-09-23, last pushed 2026-09-25, 0 stars — so treat it as a fresh drop, not an adopted tool. The value is that it is self-hostable: an owned endpoint you run rather than a paid search API you call.
Skillpack· tool, 2026-09-25 Skillpack is an MIT-licensed, self-hostable, multi-tenant hub to share, version and publish agent skills across MCP clients — an OAuth 2.1 MCP server with a native CLI and a web UI. Made by Stan Girard (of Quivr), authorship confirmed. It is both a hub-style service and a real self-hostable OSS core. It is very new: 5 stars, created 2026-09-14, last pushed 2026-09-25.
Beacon· tool, 2026-09-24 Beacon is an MIT-licensed, local-first memory layer that captures AI-coding-agent sessions across harnesses — Claude Code, Cursor, Codex, OpenCode and others — and serves reusable knowledge over MCP or Agent Skills. It has 1,493 stars, is actively releasing (v1.3.x this week), and self-hosts. Its claim to grade runs into reusable skills is the tool's own, not a verified result.
ZCode· tool, 2026-09-21 Apache-2.0 agentic development environment from Z.ai (Zhipu): a TypeScript Electron app that puts the agent conversation at the center, surrounded by a file manager, terminal, Git panel and live browser preview, with desktop, browser and terminal interfaces and an Agent CLI runtime. Z.ai open-sourced the full stack (client, backend, UI, Agent CLI). It is built as the official harness for GLM models and does not ship Claude or GPT support, though the license lets you add integrations.
Cloudflare security-audit-skill· tool, 2026-09-20 MIT coding-agent skill from Cloudflare (JavaScript) that turns an agent into a multi-phase security auditor, built on the assumption the agent will hallucinate, so it makes the agent prove everything. Recon maps the app's trust boundaries, isolated hunter agents attack from separate angles (injection, access control, business logic, crypto), validation agents try to disprove each finding, and the agent that checks a finding is never the one that found it. Output is verified and machine-readable.
ZizkaDB· tool, 2026-09-20 AGPL-3.0 audit-trail database for AI agents (Python) that records every agent decision and session as tamper-evident, checksum-backed logs, tracks the causal lineage between them, and lets you replay a session to see how the agent reached a decision. Each entry carries a checksum that changes if the record is altered, so the trail is verifiable for debugging and compliance. Self-hostable via Docker for free; a managed cloud tier is a separate paid option.
Agent Governance Toolkit· tool, 2026-09-19 MIT public-preview governance stack from Microsoft for putting deterministic controls around autonomous agents. It intercepts tool calls, messages and delegations before execution, evaluates YAML, OPA or Cedar policies, assigns agent identity, records audit decisions, and adds sandboxing, kill switches and MCP security. The Python stack installs locally, with SDKs or adapters for TypeScript, .NET, Rust, Go, OpenAI Agents SDK, LangGraph, CrewAI, AutoGen, Semantic Kernel and other runtimes.
Bastionskill· tool, 2026-09-18 MIT skill-poisoning scanner (Python, by Stefano Rizzello) that reads an agent skill before you install it and flags malicious bundled code: hidden network egress, secret theft, hook-install persistence, destructive commands, obfuscation, opaque binaries, and capabilities the SKILL.md never declared. Static analysis only, the skill's code is never run; installs via pip with zero dependencies (3.10+); scans a local skill, a directory, or a remote owner/repo. v0.2.0 returns allow / review / block.
skillbox· tool, 2026-09-18 MIT self-hosted store for AI-agent skills (TypeScript, by Kitze) that keeps your scattered markdown skills versioned in one place and serves them over MCP with client-key authentication, so any agent can pull the skill it needs instead of you copy-pasting instructions between projects. Runs via Docker with no mandatory paid dependency; optional skill-recommendation features can use a paid AI provider but are not required for the core.
Talos· tool, 2026-09-18 MIT self-hosted agent for the terminal and Telegram (Python) built around a deterministic security kernel: before any tool call runs, PolicyKernel.decide() returns ALLOW, NEEDS_HUMAN or DENY, and an approval is a single-use token bound to the exact arguments and valid for 30 seconds. The design principle is 'the model proposes, it never decides', so the LLM cannot execute an effect the kernel has not authorized. Runs locally on your own Claude or Hermes key, with no paid service dependency.
BrowserSkill· tool, 2026-09-16 MIT-licensed Rust tool from Tencent that connects an AI agent to your real, already-logged-in Chrome instead of a fresh headless one: a local CLI plus a browser extension let the agent borrow one of your open tabs, drive it with your existing cookies and sessions, and then hand control back to you. The agent works inside the auth state you already have, so it can reach logged-in pages without you scripting a login or pasting credentials into a bot.
Open Code Review· tool, 2026-09-16 Apache-2.0 AI code-review CLI that Alibaba ran internally for ~two years before open-sourcing it: it reads your git diff, runs the changed files through a hybrid deterministic-pipeline + LLM-agent pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQLi), and posts line-level comments. Bring your own OpenAI- or Anthropic-compatible key, or use delegation mode so a coding agent's own model does the review. Installs from npm.
agentdesktop· tool, 2026-09-15 Open-source visibility and control layer for AI tools across a desktop fleet (Apache-2.0, Rust), backed by Solo.io: it discovers every harness, model, MCP server and skill on a machine (per device and user), applies central policy that reconciles drift, and treats agents as non-human identities issued short-lived credentials scoped to device, user and tool. Runs standalone from local YAML, or in fleet mode via an MDM daemon wired to your identity provider and LLM gateway.
DeepSeek Harness (dsh)· tool, 2026-09-13 Open-source agent harness from DeepSeek AI (MIT, TypeScript) where everything is a plugin: the model adapter, tool registry, sandbox and agent loop are all swappable, so it runs any model rather than one vendor's. Ships four agent presets, an instant web UI (npx @deepseek-ai/dsh web), OS-level sandboxing (Landlock/Seatbelt/ACL), full MCP support, and a subagent bridge that plugs Claude Code and Codex in as tools. Currently v0.1 (RC7), a developer preview.
AI Engineering Coach· tool, 2026-09-12 Open-source VS Code extension from Microsoft (MIT; also runs in Cursor and Antigravity) that reads your LOCAL AI-coding session logs — GitHub Copilot, Claude Code, Codex CLI, OpenCode, Xcode — and scores your workflow across prompt quality, session hygiene, code review, tool mastery and context management, with 45 anti-pattern detection rules. Read-only, zero telemetry.
OpenVurp· tool, 2026-09-12 Open-source, local-first multi-agent framework (MIT, Python): create named agents with specific jobs that run on your computer, use real tools, read files, search the web and consult each other, reachable over Telegram, Discord, Slack and WhatsApp — with sandboxing and approval workflows built in, and local models via Ollama or LM Studio.
Reef· tool, 2026-09-12 Open-source infrastructure (Apache-2.0, 1.1k★ within ~10 days of release) for continually self-improving agents: a serve → observe → grow → commit loop that matches production feedback to updates and ships them as versioned changes — either training model weights (via Slime/SGLang) or evolving the agent's harness of prompts, rules and skills.
Cline (Desktop App)· tool, 2026-09-11 Open-source coding agent (Apache-2.0, 67.8k★) that just shipped a standalone macOS/Windows desktop app positioned for open-weight models: the established bring-your-own-model agent now runs outside the IDE, pairing naturally with local or hosted open-weight LLMs instead of a single vendor's frontier API.
DearAgent· tool, 2026-09-11 Open-source email infrastructure for AI agents (AGPL-3.0, TypeScript, self-hosted on your Cloudflare account): agents create their own addresses, receive mail, wait for verification codes, reply in threads and send — exposed via REST API, webhooks and an MCP server, so an agent can run a real inbox instead of borrowing yours.
Hyper-τ-Bench· tool, 2026-09-11 Open-source benchmark (MIT, Python) from Sierra Research that tests whether an AI coding agent can BUILD a working customer-service agent — not just operate one: the developer agent gets a sandbox with business records, a codebase and a production API, and must design, wire and ship a functioning agent scored against simulated customers.
Portal AI Plugins (Spotify shunt)· tool, 2026-09-11 Open-source Claude Code plugin set (Apache-2.0) from Spotify's Portal platform: the 'shunt' plugin routes I/O-heavy agent work — bulk file reads and boilerplate generation — to cheaper worker models via PreToolUse hooks, cutting Claude token usage by ~90% in Spotify's benchmarks on a Java monorepo.
Security Cards· tool, 2026-09-10 Open-source security-guidance dataset and installable agent skill (Astro site + data): targeted, version-aware security best practices for 80+ widely-used libraries across 13 languages, aimed at coding agents that write functionally-correct-but-insecure code. In the makers' BaxBench eval, wiring it into Claude Code (Opus 4.7) cut the insecure-code rate from 23.9% to 6.6%.
Stroq· tool, 2026-09-10 Open-source local action firewall (TypeScript) for AI coding agents: it intercepts an agent's operations, tracks session state by tainting what the agent has read, and blocks dangerous follow-up actions before they run on your machine — a runtime guardrail with intent/audit that complements install-time scanners.
Geiger· tool, 2026-09-09 Open-source, dependency-free CLI (JavaScript) that inventories every AI agent, MCP server, plugin and extension on a machine and reports what each can access — read-only, no install, no telemetry. Agent observability and least-privilege review for a local stack.
TeamAI CLI· tool, 2026-09-09 Open-source CLI (TypeScript) from Tencent that keeps a whole team's AI-agent configuration in sync from one shared, version-controlled repo: skills, rules, MCP servers and knowledge propagate automatically to every teammate's Claude Code, Cursor, Codex, OpenCode and other agents — no manual copy-paste, not locked to one agent.
Tripwire· tool, 2026-09-09 Open-source, sandboxed security scanner (Python) for AI skills and MCP servers: discovers and scans the exact skill files and MCP servers you are about to install and surfaces findings in one dashboard, with pluggable scanners. The supply-chain-review layer for an agent stack.
Substack MCP· tool, 2026-09-08 Open-source MCP server (TypeScript) for Substack: search your archive, create and review drafts, publish Notes, read analytics and manage subscribers across publications — exposing content operations to an AI agent as tools plus a CLI (the maker cites 24 tools).
ACI.dev (Aipolabs)· tool, 2026-09-03 OSS alt to Composio (proprietary), Zapier-for-agents; ~4900 stars; complements Composio, Nango, Klavis; Apache-2.0. Open infra: multi-tenant auth, 600+ tools, and a Unified MCP server + VibeOps. Connectors use each app's official OAuth/API keys -> ethical_risk empty.
CLI-Anything· tool, 2026-09-03 Framework and registry for making existing software agent-native through structured CLIs; seven-phase harness generator, CLI-Hub package manager, JSON output, tests, SKILL.md generation, and maintained harnesses for creative, productivity, engineering, GIS, media, and developer applications; ~47.6k stars; generated CLIs execute the permissions of their wrapped software — review before agent use
Composio· tool, 2026-09-03 OSS alt to Zapier-for-agents, proprietary tool platforms; ~29600 stars; complements ACI.dev, Nango, Pipedream, MCP servers; Root LICENSE is MIT (some managed-server subdirectories carry Elastic-2.0). Handles OAuth/managed-auth to 250+ apps and exposes them as agent tools/MCP; uses each app's official credentials -> ethical_risk empty. Cloud offering is separate.
Klavis AI· tool, 2026-09-03 OSS alt to Composio MCP, proprietary MCP hubs; ~5800 stars; complements modelcontextprotocol/servers, ACI.dev, MetaMCP; Apache-2.0. Fleet of per-app MCP servers with built-in OAuth flows (Gmail/Slack/GitHub/Notion/Jira/etc.); uses each provider's official OAuth -> platform-tos empty. Self-hostable or hosted.
MCPJungle· tool, 2026-09-03 OSS alt to proprietary MCP gateways; ~1200 stars; complements MetaMCP, lasso mcp-gateway; MPL-2.0 (weak copyleft). Self-hosted registry+gateway: register servers once, expose one endpoint to Claude/Cursor/Codex/agents with access control. Auth delegated to registered servers. No per-platform ToS flag.
MetaMCP· tool, 2026-09-03 OSS alt to proprietary MCP gateways; MCP Context Forge (XREF); ~2600 stars; complements MCPJungle, lasso mcp-gateway, Klavis; MIT (successor to metatool-app). Groups MCP servers into namespaces, exposes unified SSE/HTTP/OpenAPI endpoints with middlewares + API-key/OIDC auth, Docker-packaged. It fronts other servers; auth is delegated to them. No per-platform ToS flag.
modelcontextprotocol/servers· tool, 2026-09-03 OSS alt to proprietary agent-tool plugins; ~89000 stars; complements Klavis, awesome-mcp-servers, MCP Context Forge (XREF); Reference servers under MIT, transitioning to Apache-2.0 (new contributions Apache-2.0; unrelicensed MIT contributions stay MIT) -> OSI-open either way. Each server uses the target service's official auth. No per-platform ToS flag.
Model Context Protocol Registry· tool, 2026-09-03 Community-driven registry service for Model Context Protocol servers. Provides a stateless REST read API (v0.1) with cursor pagination and updated_since delta sync, plus the server.json entry schema that standardizes tool distribution metadata.
URL Intelligence Agent· tool, 2026-08-31 An evidence-first enrichment agent that turns a public URL into structured, sourced intelligence: entity resolution, contact/team extraction, tech-stack detection, brand assets, SEO/security signals, and relationship graphs — with confidence scores and provenance. Runs as CLI, HTTP API, MCP server, or self-hosted service.
Itsuki· tool, 2026-08-29 Open-source memory engine for AI agents over REST API + MCP: captures conversations/events into typed, versioned, reversible objects (facts, entities, relationships, events) accessible across 26+ tools, with an audit trail and JSON export.
Activepieces· tool, 2026-08-25 Open-source workflow automation (Zapier alternative): no-code builder, 280+ integrations, a TypeScript pieces framework, and ~400 MCP servers for LLM integration. Self-hostable.
Chrome DevTools MCP· tool, 2026-08-25 MCP server that lets an agent inspect and control a live Chrome browser — performance traces, network requests, console errors, rendered pages, and screenshots.
Firecrawl MCP Server· tool, 2026-08-25 Official Firecrawl MCP server that brings web search, scraping, crawling, and structured extraction to MCP-compatible agents as clean, agent-ready context.
Google Analytics MCP Server· tool, 2026-08-25 The official Google Analytics team's MCP server: run GA4 core/funnel/realtime reports and property queries through the Analytics read scope — one of the safer direct marketing-data connections.
Google Agent Skills· tool, 2026-08-25 Google's official collection of Agent Skills across infrastructure, databases, AI/ML, security, and developer tools (incl. Google Ads/Analytics developer workflows). Installable via `npx skills add google/skills`. Broad, not marketing-only.
Playwright MCP· tool, 2026-08-25 Microsoft MCP server that lets agents automate a browser via structured accessibility snapshots (not screenshots) — for rendered-page checks, forms, funnels, and landing-page QA.
oc (only-cli)· tool, 2026-08-25 Open-source CLI that fetches a web page and returns a compact numbered view instead of raw HTML — a cheap web-read layer for scraping/enrichment agents. Installs as a CLI and as an agent skill (npx skills add).
SkillOpt· tool, 2026-07-02 SkillOpt is a Microsoft Research optimizer that trains reusable natural-language skills for frozen LLM agents, keeping only trajectory-driven edits that pass benchmark validation and transferring the result across models. Open source: yes (MIT); self-hostable; pricing free. Python, PyPI, 17.6k stars.