M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionRoam Code MCP ServerLet AI coding agents understand code before changing it safely.GitHub MCP ServerGitHub's official MCP server for managing repos, issues, PRs, and workflows via natural language
FMRS69 / 100 · C76 / 100 · B
Reliability10 / 2013 / 20
Security and permissions13 / 2014 / 20
Maintenance16 / 2018 / 20
Documentation17 / 2017 / 20
Setup experience13 / 2014 / 20
Best for
  • Large local repositories used with AI coding agents.
  • Development teams that need change-impact analysis and safer refactoring.
  • Projects requiring architecture governance, code health metrics, and audit evidence.
  • Users who want local code analysis without API keys.
  • Teams that want an AI assistant to directly operate on GitHub repos and collaboration workflows
  • Users already in the GitHub Copilot ecosystem who want a zero-deployment remote option
Not for
  • Real-time type checking; the source recommends an LSP for that purpose.
  • Small scripts with fewer than about 10 files.
  • Simple tasks requiring only raw text search.
  • Treating taint or long-tail detector results as complete security coverage.
  • Scenarios where you don't want the assistant to have write access to repos (enable only read-only toolsets)
  • Environments with strict network isolation for private repos that can't reach the official remote endpoint
Required permissions
  • Access to the local repository is needed to discover, parse, and analyze source files.
  • The server creates the local .roam/index.db and related analysis state.
  • Write, persistence, or change-related tools may update .roam control files, run records, or evidence files.
  • API keys and cloud login are not required by default.
  • A personal access token (PAT) or OAuth App token; effective scope depends on the token's own permissions
  • Enabling toolsets like actions/issues/pull_requests grants write access — request tokens on a least-privilege basis
Risks and side effects
  • Missing, stale, or interrupted indexes can produce incomplete analysis; inspect returned status and error signals.
  • Static analysis and framework-idiom detection are not substitutes for real-time type checking or deep SAST; some findings are advisory.
  • The full preset exposes 244 tools and may enlarge an agent's prompt surface.
  • The first tree-sitter-language-pack use may download a checksum-verified platform grammar bundle; other network-capable commands and flags are opt-in.
  • Write operations or autonomous-agent modes may create real repository files and run-record changes.
  • Write toolsets (creating/merging PRs, triggering workflows) can cause accidental changes if the token is overscoped — try a read-only toolset first
  • In hosted mode, credentials travel via the Authorization header — make sure the client-to-api.githubcopilot.com connection is trusted
Supported clientsClaude Code, Claude Desktop, Cursor, VS Code with CopilotClaude Desktop, Claude Code, VS Code, Cursor, Windsurf, JetBrains IDEs, Zed, Amp
Tools1715