AgentArmorHQ
Sign in
Team allowlist & .mcp.json builder

Frontend Team: approved MCP servers and skills

Search and select the AI tools your team is allowed to run, set your minimum risk grade, and copy a hardened .mcp.json and Markdown security policy in one click.

  1. Pick your toolsSearch by tool name or click a starter pack below.
  2. Set your minimum gradeFlag any tool that falls below your team’s bar (Grade A, B, or C).
  3. Copy & shareDrop the hardened .mcp.json and SECURITY_MCP.md into your repo.
Starter packs:
Core Engineering (5 tools)Frontend & Design (4 tools)Search & Automation (4 tools)Strict Grade-A Audit Demo (5 tools)
Quick add:+ Figma-Context-MCP (A)+ next-devtools-mcp (A)+ firecrawl-mcp-server (A)+ exa-mcp-server (A)+ slack-mcp-server (B)+ Anthropic skills (B)
Selected tools (5):Reset to default (5 tools)

Approved catalog (5 tools)

5 of 5 meet Grade A or better; every listed tool meets your bar

5 tools

Approved tools. Column headers sort the table.
Action
chrome-devtools-mcpApp connectorAA · Few risk signals Based on public adoption and transparency signals as of Oct 16, 2026. Our opinion, not a code audit or security guarantee.Meets Grade ANo local folder access notedNo shell command runner noted54.4k stars · 3M/wkRemove
context7App connectorAA · Few risk signals Based on public adoption and transparency signals as of Oct 16, 2026. Our opinion, not a code audit or security guarantee.Meets Grade ANo local folder access notedNo shell command runner noted63.9k stars · 478k/wkRemove
@modelcontextprotocol/server-filesystemApp connectorAA · Few risk signals Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.Meets Grade AReads & writes local foldersNo shell command runner noted— · 911k/wkRemove
n8n-mcpApp connectorAA · Few risk signals Based on public adoption and transparency signals as of Oct 16, 2026. Our opinion, not a code audit or security guarantee.Meets Grade ANo local folder access notedNo shell command runner noted23.2k stars · 115k/wkRemove
claude-memAI agent skillAA · Few risk signals Based on public adoption and transparency signals as of Oct 16, 2026. Our opinion, not a code audit or security guarantee.Meets Grade ANo local folder access notedNo shell command runner noted104k stars · 23.9k/wkRemove

Team .mcp.json

Drop it in your repository root. Install scripts are turned off with --ignore-scripts.

json
{
  "mcpServers": {
    "chrome-devtools-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "--ignore-scripts",
        "chrome-devtools-mcp"
      ]
    },
    "context7-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "--ignore-scripts",
        "@upstash/context7-mcp"
      ]
    },
    "server-filesystem": {
      "command": "npx",
      "args": [
        "-y",
        "--ignore-scripts",
        "@modelcontextprotocol/server-filesystem"
      ]
    },
    "n8n-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "--ignore-scripts",
        "n8n-mcp"
      ]
    }
  }
}

Policy for SECURITY_MCP.md

Paste into Notion, Confluence or your repository’s security policy.

markdown
# Frontend Team — Approved AI Agent Skills & MCP Allowlist
Last updated: 2026-10-29 · Minimum required grade: **Grade A** (Few risk signals)

## Approved Catalog
| Tool | Kind | AgentArmorHQ Grade | Local Files | Command Execution |
| :--- | :--- | :--- | :--- | :--- |
| [chrome-devtools-mcp](https://agentarmorhq.com/skills/chromedevtools-chrome-devtools-mcp) | App connector | **Grade A (Few risk signals)** | No local folder access noted | No shell command runner noted |
| [context7](https://agentarmorhq.com/skills/upstash-context7) | App connector | **Grade A (Few risk signals)** | No local folder access noted | No shell command runner noted |
| [@modelcontextprotocol/server-filesystem](https://agentarmorhq.com/skills/modelcontextprotocol-servers) | App connector | **Grade A (Few risk signals)** | Reads & writes local folders | No shell command runner noted |
| [n8n-mcp](https://agentarmorhq.com/skills/czlonkowski-n8n-mcp) | App connector | **Grade A (Few risk signals)** | No local folder access noted | No shell command runner noted |
| [claude-mem](https://agentarmorhq.com/skills/thedotmack-claude-mem) | AI agent skill | **Grade A (Few risk signals)** | No local folder access noted | No shell command runner noted |

## Team Hardening Rules
1. **Minimum Grade Gate:** Only install MCP servers and agent skills with an AgentArmorHQ risk grade of **A** or better unless explicitly reviewed.
2. **Disable Install Hooks:** Always pass `--ignore-scripts` when running `npx` MCP connectors.
3. **Workspace Isolation:** Never pass `/` or `~` to filesystem connectors; scope every connector to a single repository folder.
4. **Scoped Credentials:** Use read-only, expiring tokens in `.mcp.json` and never commit live tokens to version control.

_Generated via [AgentArmorHQ](https://agentarmorhq.com/allowlist). Based on public adoption and transparency signals as of Oct 28, 2026. Our opinion, not a code audit or security guarantee._
Continuous monitoring

Get an email the day any tool on your allowlist gets a bad version

Watch 3 packages for free, or monitor up to 100 across your stack with daily email alerts, change history and full reports on Team.

See Team & Pro plansCheck a live .mcp.json

Based on public adoption and transparency signals as of Oct 28, 2026. Our opinion, not a code audit or security guarantee.