BrowseFull catalogOutcomesSolve a specific problemRolesStack by teamTrustFilter by risk tier

Tools We Don't Recommend

We review hundreds of Claude AI tools; most make the catalog, some don't. This page is a curated (not exhaustive) list of exclusions worth knowing about, each with the specific reason — not just "niche" or "incomplete." Every verdict below is deep-linkable (hover a name for its #anchor).

Page last updated: 2026-08-17 · Security holds: 29 · Rejections: 2 · Scored below standard: 141

Security Holds

These tools were flagged during review for security concerns that make them unsuitable for recommendation.

Anthropic-Mythos-Desktop-StudioSecurity Hold Source
Security concerns identified during review. Exercise caution.
Claude-Code-Agent-Design-KitSecurity Hold Source
Security concerns identified during review. Exercise caution.
Claude-Zeroclaw-NexusSecurity Hold Source
Security concerns identified during review. Exercise caution.
FreeRideSecurity Hold Source
Rotates between free-tier accounts on multiple AI providers to dodge rate limits that those providers set intentionally. That is a direct violation of the Terms of Service for OpenAI, Anthropic, Google, and every other mainstream API — grounds for account termination, IP bans, and, for commercial use, potential breach-of-contract exposure. Beyond the legal posture, the tool's whole value proposition depends on staying one step ahead of provider enforcement, which means it will break unpredictably and invite anti-abuse scrutiny on any account touching it. If you need more throughput, pay for it; if you are building for clients, this is a liability you do not want in the stack.
Get Shit Done (GSD)Security Hold Source
Security concerns identified during review. Exercise caution.
Mythos-Claude-OrchestratorSecurity Hold Source
Security concerns identified during review. Exercise caution.
NanoBanana-PPT-SkillsSecurity Hold Source
Security concerns identified during review. Exercise caution.
agent-toolSecurity Hold Source
Bundles SSH and SFTP clients, live process memory inspection, binary analysis, and debugger (DAP) control into a single MCP server with no sandboxing or capability scoping. A successful prompt injection — or a confused model following a malicious README — could pivot into production servers using your keys, read credentials out of a running process's memory, or attach a debugger to a sensitive binary. Each of these capabilities alone warrants careful review; stacking them behind one LLM-driven interface turns the tool into a general-purpose post-exploitation toolkit. Use individual, purpose-built tools with narrower scopes instead.
awesome-claude-fable-5-prompt-vaultSecurity Hold Source
Security concerns identified during review. Exercise caution.
blender-mcpSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-autonomous-deploymentSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-cli-mcp-bridgeSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-design-studio-toolkitSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-opus-dev-workbenchSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-opus-interface-toolkitSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-session-flowSecurity Hold Source
Security concerns identified during review. Exercise caution.
everything-claude-codeSecurity Hold Source
Security concerns identified during review. Exercise caution.
exo-harness-ai-pipelineSecurity Hold Source
Security concerns identified during review. Exercise caution.
fable-opus-desktop-kitSecurity Hold Source
Security concerns identified during review. Exercise caution.
gryffin-calorai-ventusSecurity Hold Source
Security concerns identified during review. Exercise caution.
hewn-forgeSecurity Hold Source
Security concerns identified during review. Exercise caution.
local-ai-code-assistantSecurity Hold Source
Security concerns identified during review. Exercise caution.
mcp-edd-analytics-vantageSecurity Hold Source
Security concerns identified during review. Exercise caution.
multi-agent-architecture-advisorSecurity Hold Source
Security concerns identified during review. Exercise caution.
plan-execute-verify-claude-codeSecurity Hold Source
Security concerns identified during review. Exercise caution.
real-browser-mcpSecurity Hold Source
Connects Claude to your actual Chrome profile — the one logged into your bank, email, CRM, and admin panels. Prompt injection from any page the model reads (an email, a search result, a scraped article) can trigger real actions inside those sessions: sending messages, approving transactions, changing settings, exfiltrating data. There is no sandbox, no per-site scoping, and no meaningful confirmation layer. The blast radius is everything your browser is currently signed into. For a consultant or operator, that is almost never an acceptable trade against the convenience it offers.
secbotSecurity Hold Source
Security concerns identified during review. Exercise caution.
strategic-advisor-orchestratorSecurity Hold Source
Security concerns identified during review. Exercise caution.
t2000Security Hold Source
Exposes on-chain lending, borrowing, swapping, and investing on the Sui blockchain as tools an AI agent can call directly. Blockchain transactions are irreversible — a hallucinated amount, a wrong token address, or a prompt-injected instruction moves real money that no support desk can claw back. Non-custodial framing does not change this; it just means you personally absorb the loss. DeFi protocols themselves also carry smart-contract and oracle risk that most LLMs cannot reason about. Financial actions need human-in-the-loop confirmation and hard spending caps, neither of which this tool enforces.

Not Recommended

These tools were reviewed and rejected for specific reasons beyond just being niche or incomplete.

Linkedin Mcp ServerNot Recommended Source
Scrapes LinkedIn profiles, companies, and jobs via AI
Automates scraping of LinkedIn profiles, companies, and job listings through an AI agent. LinkedIn's User Agreement explicitly prohibits automated data collection, and LinkedIn has successfully pursued scrapers through account termination, cease-and-desist letters, and federal litigation (hiQ Labs, 3taps, and others). Detection is aggressive — behavioral fingerprinting, rate analysis, and device signals routinely flag scraping activity within days. For a consultant, the downside is not hypothetical: a suspended LinkedIn account is a business continuity problem, and using scraped data in client deliverables can create GDPR and CCPA exposure. Use the official LinkedIn API or a sanctioned data partner.
Mcp MindmeshNot Recommended Source
Quantum-inspired swarm orchestrating multiple Claude instances
Markets itself with terms like 'quantum field coherence,' 'ensemble intelligence,' and 'neural swarm' that imply capabilities the code does not deliver — under the hood it is a straightforward multi-model fan-out with a voting step. Overstated claims on an MCP server are a reliability signal in themselves: if the README misrepresents what the tool does, you should assume the same looseness applies to error handling, data handling, and security posture. You also inherit whatever credentials get wired into each underlying provider, multiplied across instances. Real multi-agent orchestration is possible, but it needs honest documentation before it earns a place in a client stack.

Scored Below Standard

These tools were catalogued and evaluated, but their latest evaluation scored a grade of D or F — they fell below the catalog's usable tier on the evidence (trust signals, maintenance, community pulse). This is an evidence-based rating, not a security flag. The stated reason for each comes from its evaluation rationale where one was recorded.

@browserstack/mcp-serverGraded D Source
145 GitHub stars; contributors unknown; last commit 9d ago; license AGPL-3.0.
@cometix/claude-codeGraded D Source
236 GitHub stars; contributors unknown; last commit 4d ago; license SEE LICENSE IN README.md.
@gonzih/skills-productGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
@motion.page/claude-pluginGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license FSL-1.1-Apache-2.0.
AR Claude Skills (Marketing/Product)Graded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 6 GitHub stars; 2 contributors; last commit 263d ago; license no license.
Agent-Engineering-InfrastructureGraded D Source
27 GitHub stars; contributors unknown; last commit 0d ago; license no license.
Ay-SkillsGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 79 GitHub stars; 1 contributors; last commit 124d ago; license no license.
CTXGraded D Source
141 GitHub stars; 2 contributors; last commit 75d ago; license no license.
Claude Cowork Desktop CollaboratorGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 36 GitHub stars; 1 contributors; last commit 178d ago; license no license.
Composure Suite (hrconsultnj)Graded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 69 GitHub stars; 1 contributors; last commit 0d ago; license no license.
Data Analytics Skills (31 Skills)Graded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 216 GitHub stars; 1 contributors; last commit 72d ago; license no license.
DingTalk SkillsGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 87 GitHub stars; 1 contributors; last commit 9d ago; license no license.
DisCatSharpGraded D Source
144 GitHub stars; contributors unknown; last commit 0d ago; license no license.
Fantastical MCP ConnectorGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
Fivetran MCP ServerGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 21 GitHub stars; 3 contributors; last commit 10d ago; license no license.
GenAI-AgenticAI-From-Zero-to-ProductionGraded D Source
108 GitHub stars; 1 contributors; last commit 76d ago; license no license.
HubSpot MCPGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
JoaniumGraded D Source
187 GitHub stars; contributors unknown; last commit 0d ago; license no license.
KageGraded D Source
30 GitHub stars; 2 contributors; last commit 0d ago; license GPL-3.0.
KilnGraded D Source
40 GitHub stars; 5 contributors; last commit 0d ago; license AGPL-3.0.
Kling MCPGraded D Source
39 GitHub stars; 1 contributors; last commit 406d ago; license MIT.
Lorn.NovelWriteSkillsGraded D Source
128 GitHub stars; 1 contributors; last commit 3d ago; license no license.
MCP.so — MCP Server RegistryGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
Nexus-skillsGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 162 GitHub stars; 2 contributors; last commit 97d ago; license no license.
OnePagentGraded D Source
138 GitHub stars; 2 contributors; last commit 4d ago; license no license.
OnionClawGraded D Source
224 GitHub stars; 2 contributors; last commit 0d ago; license no license.
OpenConstructionEstimate-DDC-CWICRGraded D Source
200 GitHub stars; contributors unknown; last commit 0d ago; license no license.
PR Impact AnalyzerGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
Pace (Wearables MCP)Graded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
RepomixGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
Skills.sh — Agent Skills DirectoryGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
SpawnMail Claude Code SkillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
SpecKit MCPGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
Themata-Claude-ScribeGraded D Source
152 GitHub stars; contributors unknown; last commit 0d ago; license no license.
VitePress Docs SkillGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
WRAI.THGraded D Source
26 GitHub stars; 5 contributors; last commit 4d ago; license AGPL-3.0.
Zoom MCP ConnectorGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
agent-designerGraded D Source
126 GitHub stars; contributors unknown; last commit 0d ago; license no license.
agent-fleet-oGraded D Source
53 GitHub stars; 2 contributors; last commit 2d ago; license AGPL-3.0.
ai-friendly-web-design-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 70 GitHub stars; 1 contributors; last commit 15d ago; license CC-BY-4.0.
ai-literacy-superpowersGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 39 GitHub stars; 2 contributors; last commit 18d ago; license no license.
ai-skillsGraded D Source
32 GitHub stars; contributors unknown; last commit 4d ago; license no license.
ai-workspace-archiveGraded D Source
27 GitHub stars; contributors unknown; last commit 0d ago; license no license.
altium-designer-mcpGraded D Source
29 GitHub stars; 5 contributors; last commit 0d ago; license GPL-3.0.
anki-mcp-serverGraded D Source
242 GitHub stars; contributors unknown; last commit 1d ago; license no license.
asimonimGraded D Source
28 GitHub stars; 1 contributors; last commit 3d ago; license GPL-3.0.
atlasGraded D Source
54 GitHub stars; contributors unknown; last commit 0d ago; license no license.
atrisGraded D Source
67 GitHub stars; contributors unknown; last commit 0d ago; license no license.
autonomous-dev-teamGraded D Source
29 GitHub stars; 3 contributors; last commit 0d ago; license no license.
awesome-llm-observabilityGraded D Source
26 GitHub stars; contributors unknown; last commit 0d ago; license no license.
awesome-wereadGraded D Source
49 GitHub stars; 2 contributors; last commit 0d ago; license no license.
basecamp-skillGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
bettercallclaudeGraded D Source
33 GitHub stars; 3 contributors; last commit 2d ago; license AGPL-3.0.
bruce-doc-converterGraded D Source
56 GitHub stars; 1 contributors; last commit 16d ago; license no license.
catalystGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 17 GitHub stars; 2 contributors; last commit 0d ago; license no license.
cc-gemini-pluginGraded D Source
70 GitHub stars; 2 contributors; last commit 102d ago; license no license.
cezarGraded D Source
36 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-brewcodeGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 28 GitHub stars; 1 contributors; last commit 1d ago; license no license.
claude-code-docsGraded D Source
50 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-code-marketing-quickstartGraded D Source
38 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-ctrlGraded D Source
191 GitHub stars; contributors unknown; last commit 0d ago; license no license.
cligateGraded D Source
89 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
clipforgeGraded D Source
181 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
cloud-finops-skillsGraded D Source
44 GitHub stars; 1 contributors; last commit 12d ago; license no license.
cms-cultivatorGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 15 GitHub stars; 3 contributors; last commit 5d ago; license GPL-2.0.
codebadgerGraded D Source
113 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
codex-poolerGraded D Source
25 GitHub stars; contributors unknown; last commit 0d ago; license no license.
codymasterGraded D Source
47 GitHub stars; 5 contributors; last commit 18d ago; license no license.
cowork-pluginsGraded D Source
221 GitHub stars; contributors unknown; last commit 0d ago; license no license.
critical-briefsGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
cuxGraded D Source
68 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
dotnet-clean-architecture-skillsGraded D Source
68 GitHub stars; 2 contributors; last commit 12d ago; license no license.
dsclaudeGraded D Source
56 GitHub stars; contributors unknown; last commit 0d ago; license no license.
dunetraceGraded D Source
55 GitHub stars; contributors unknown; last commit 0d ago; license no license.
failproofaiGraded D Source
151 GitHub stars; contributors unknown; last commit 0d ago; license no license.
football-docsGraded D Source
46 GitHub stars; contributors unknown; last commit 0d ago; license no license.
forksilly.docGraded D Source
135 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
game-design-skills-bundleGraded D Source
36 GitHub stars; 2 contributors; last commit 29d ago; license no license.
git-workflow-skillGraded D Source
36 GitHub stars; 4 contributors; last commit 1d ago; license no license.
gitea-cli-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
handoffGraded D Source
60 GitHub stars; contributors unknown; last commit 0d ago; license no license.
hotclipGraded D Source
38 GitHub stars; 1 contributors; last commit 1d ago; license AGPL-3.0.
humanizer-deGraded D Source
38 GitHub stars; contributors unknown; last commit 1d ago; license no license.
i18n-ai-translateGraded D Source
99 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
jira-commandsGraded D Source
41 GitHub stars; contributors unknown; last commit 0d ago; license no license.
kansokuGraded D Source
268 GitHub stars; contributors unknown; last commit 0d ago; license no license.
kasettoGraded D Source
105 GitHub stars; contributors unknown; last commit 0d ago; license no license.
kimbapGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 16 GitHub stars; 3 contributors; last commit 83d ago; license no license.
korean-contractsGraded D Source
47 GitHub stars; 1 contributors; last commit 94d ago; license no license.
local-mcp-releasesGraded D Source
32 GitHub stars; 4 contributors; last commit 0d ago; license no license.
macuse-mcpGraded D Source
36 GitHub stars; contributors unknown; last commit 0d ago; license no license.
management-consulting-forgeGraded D Source
52 GitHub stars; contributors unknown; last commit 0d ago; license no license.
mcp-1cGraded D Source
125 GitHub stars; contributors unknown; last commit 0d ago; license no license.
mcpmateGraded D Source
33 GitHub stars; 2 contributors; last commit 0d ago; license AGPL-3.0.
medsci-skillsGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 184 GitHub stars; 1 contributors; last commit 5d ago; license no license.
mxLoreGraded D Source
29 GitHub stars; 1 contributors; last commit 10d ago; license no license.
ollama-mcpGraded D Source
168 GitHub stars; 3 contributors; last commit 257d ago; license AGPL-3.0.
omop_mcpGraded D Source
39 GitHub stars; 1 contributors; last commit 75d ago; license no license.
onlyboxesGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 16d ago; license AGPL-3.0.
open-science-skillsGraded D Source
34 GitHub stars; 1 contributors; last commit 0d ago; license no license.
opencode-plusplusGraded D Source
109 GitHub stars; contributors unknown; last commit 0d ago; license no license.
openpisciGraded D Source
49 GitHub stars; 5 contributors; last commit 39d ago; license no license.
orionbelt-analyticsGraded D Source
45 GitHub stars; 2 contributors; last commit 4d ago; license no license.
orionbelt-semantic-layerGraded D Source
58 GitHub stars; contributors unknown; last commit 0d ago; license no license.
php-modernization-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 0d ago; license no license.
piyazGraded D Source
118 GitHub stars; contributors unknown; last commit 1d ago; license AGPL-3.0.
pubnub-mcp-serverGraded D Source
32 GitHub stars; 10 contributors; last commit 3d ago; license no license.
qaskillsGraded D Source
137 GitHub stars; contributors unknown; last commit 0d ago; license no license.
registryGraded D Source
28 GitHub stars; 1 contributors; last commit 74d ago; license no license.
reticleGraded D Source
297 GitHub stars; contributors unknown; last commit 0d ago; license no license.
sealos-skillsGraded D Source
36 GitHub stars; contributors unknown; last commit 0d ago; license no license.
security-audit-skillGraded D Source
30 GitHub stars; 4 contributors; last commit 0d ago; license no license.
seobuild-onpageGraded D Source
212 GitHub stars; contributors unknown; last commit 2d ago; license no license.
skill-managerGraded D Source
107 GitHub stars; contributors unknown; last commit 1d ago; license no license.
skillhotGraded D Source
28 GitHub stars; 1 contributors; last commit 0d ago; license no license.
skills-standaardenGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 5 GitHub stars; 5 contributors; last commit 1d ago; license EUPL-1.2.
skillsmith-cliGraded D Source
74 GitHub stars; contributors unknown; last commit 0d ago; license Elastic-2.0.
sp500-mcp-serverGraded D Source
100 GitHub stars; contributors unknown; last commit 1d ago; license AGPL-3.0.
sql_to_ERGraded D Source
176 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
statamic-mcpGraded D Source
32 GitHub stars; 4 contributors; last commit 20d ago; license no license.
strategic-frameworksGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
stratevoGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 24 GitHub stars; 1 contributors; last commit 88d ago; license AGPL-3.0.
sv-gridGraded D Source
205 GitHub stars; 2 contributors; last commit 0d ago; license no license.
synapse-aiGraded D Source
198 GitHub stars; contributors unknown; last commit 7d ago; license AGPL-3.0.
tacitGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 9 GitHub stars; 2 contributors; last commit 5d ago; license no license.
trvlGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 45 GitHub stars; 1 contributors; last commit 6d ago; license no license.
typo3-mcp-serverGraded D Source
82 GitHub stars; contributors unknown; last commit 2d ago; license GPL-2.0.
ue-mcpGraded D Source
123 GitHub stars; contributors unknown; last commit 1d ago; license no license.
unoplat-code-confluenceGraded D Source
89 GitHub stars; contributors unknown; last commit 7d ago; license no license.
veriflow-ccGraded D Source
38 GitHub stars; 3 contributors; last commit 16d ago; license no license.
vox-ai-motion-graphics-generatorGraded D Source
123 GitHub stars; contributors unknown; last commit 0d ago; license no license.
whatsapp-mcpGraded D Source
75 GitHub stars; contributors unknown; last commit 2d ago; license GPL-3.0.
work-buddyGraded D Source
32 GitHub stars; 1 contributors; last commit 4d ago; license GPL-3.0.
wsp-wordpress-mcpGraded D Source
26 GitHub stars; contributors unknown; last commit 0d ago; license GPL-2.0.
xcode-tools-docsGraded D Source
31 GitHub stars; contributors unknown; last commit 2d ago; license no license.
yantrikdb-serverGraded D Source
154 GitHub stars; contributors unknown; last commit 5d ago; license AGPL-3.0.
yumeGraded D Source
146 GitHub stars; contributors unknown; last commit 0d ago; license no license.
zap-coding-agentGraded D Source
25 GitHub stars; 1 contributors; last commit 1d ago; license no license.
zenku-v2Graded D Source
35 GitHub stars; contributors unknown; last commit 22d ago; license no license.

Tool authors: If you believe your tool was excluded in error or have addressed the concerns listed here, reach out on LinkedIn. We re-evaluate tools when significant changes are made.

Frequently Asked Questions

Why are these Claude tools not recommended?

Each tool on this page was excluded for a specific reason disclosed alongside it — typically a security posture that creates unacceptable blast radius, a terms-of-service violation, overstated marketing relative to what the code delivers, or a design that puts user data or funds at risk. The reasoning for each tool is written out so you can judge for yourself whether it matches your situation.

Does "not recommended" mean these tools are unsafe?

Not always. "Not recommended" means we would not deploy it ourselves or suggest it to a client in our typical consulting context. Some tools carry genuine security concerns; others are simply overstated or carry legal risk like terms-of-service violations. Read the specific reasoning for each tool — context matters.

What is the difference between a security hold and a tool scored below standard?

A security hold is a tool flagged for a specific security concern — for example, an unacceptable blast radius if prompt-injected, or a design that puts credentials or funds at risk. A tool scored below standard was catalogued and evaluated normally, but its latest evaluation graded D or F on the evidence (trust signals, maintenance, community pulse). The first is a risk flag; the second is an evidence-based quality rating. Each tool's section on this page makes clear which kind it is.

How do you decide which Claude tools not to recommend?

We look at blast radius if the tool is prompt-injected, scope of credentials or capabilities it bundles, maintainer identity and responsiveness, license posture, documentation accuracy, and whether the value proposition justifies the risk. Our evaluation framework is published at /evaluate-tools.

Can a tool be re-evaluated if it changes?

Yes. If a maintainer addresses the specific concerns listed on this page, reach out and we will re-evaluate. Tools on this page are not blacklisted forever — they reflect the state of the tool at review time.

Where the rest of the catalog lives: the ranked catalog holds the tools we recommend; Also Catalogued holds usable-but-unranked tools; and The Evaluation File holds everything reviewed but not yet ranked. This page is the fourth tier: reviewed and actively advised against.
Full Catalog · The Evaluation File · Getting Started · Trending · Deployment Playbook · Evaluation Guide · How We Review

Rolling Claude out in your org? Let's talk.

Start a conversation →