Loaditout

io.github.loaditoutadminPublished by GitHub account loaditoutadminv0.2.4Updated Oct 24, 2026

Search and install 20,000+ security-graded MCP servers and agent skills.

VerifiedSTDIODesktop onlyKnowledge & MemoryDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Lets an assistant search a catalog of 20,000+ MCP servers and agent skills, check their A/B/C/F security grades, and get install configurations.

What you can do
  • Search and browse the catalog of MCP servers and agent skills by keyword, category, or personalized preferences
  • Read full details, security grade and install configuration for a specific skill
  • Get platform-specific install configuration for one skill, a batch of up to 20, or a curated pack
  • Get recommendations and analyze which tools a task needs
  • Validate whether an action on a skill is safe, request and check human permission, and report or flag skills
  • Save and recall persistent key-value memory, and list or verify skill usage proofs and share a public loadout
When to use it
Useful when you want an assistant to help you find, compare and set up MCP servers or agent skills, or to check a skill's security grade before adding it to your setup.
Requirements
Runs locally over stdio, typically started with npx from the npm package loaditout-mcp-server, so Node.js and network access to the Loaditout service are needed. No environment variables or headers are declared.
Before you install
Install tools return configuration rather than performing installs, but the assistant can still write persistent memory and submit reports or flags about skills. Security grades come from the vendor's own seven criteria and are not an independent audit. Skill details and usage data are sent to the Loaditout service.

Installation

In SourceWeft

  1. Open Loaditout in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Loaditout MCP Server

[loaditout-mcp-server MCP server]

An MCP server for discovering, security-grading, and installing AI agent skills from Loaditout.

Search 20,000+ MCP servers and agent skills, check security grades (A/B/C/F), and install directly from your agent.

Quick Start

bash
npx loaditout-mcp-server

Claude Code

Add to .claude/settings.json:

json
{  "mcpServers": {    "loaditout": {      "command": "npx",      "args": ["-y", "loaditout-mcp-server"]    }  }}

Cursor

Add to .cursor/mcp.json:

json
{  "mcpServers": {    "loaditout": {      "command": "npx",      "args": ["-y", "loaditout-mcp-server"]    }  }}

Tools

ToolDescription
search_skillsSearch 20,000+ MCP servers and agent skills by keyword
smart_searchPersonalized search with history and preferences applied
get_skillGet full details, security grade, and install config for a specific skill
install_skillGet platform-specific install configuration for any skill
install_batchInstall multiple skills at once (up to 20)
install_packInstall an entire curated pack (e.g., research-agent, data-engineer)
recommend_skillsGet skill recommendations based on your project context
check_capability_gapAnalyze what tools you need for a specific task
list_categoriesBrowse skills by category
validate_actionCheck if an action on a skill is safe before executing
report_skill_usageReport whether a skill worked correctly
flag_skillReport problematic or unsafe skills
save_memorySave key-value pairs to persistent agent memory
recall_memoryRetrieve previously saved memories
request_permissionRequest human approval to install a skill
check_permissionCheck status of a permission request
list_my_proofsList your verified skill usage history
verify_proofVerify an execution proof by ID
share_loadoutGet your public skill configuration

Security Grading

Every server is graded A/B/C/F based on 7 criteria:

  1. Zero prompt injection flags
  2. Zero capability flags (no shell, exec, sudo, filesystem, process.env)
  3. README content present
  4. Description present
  5. Committed within 12 months
  6. At least 5 GitHub stars
  7. No secret env vars required

Only 20.5% of the 20,652 servers in our index earn an A grade.

Links

License

MIT

Source: README.md at commit 5f52866

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.4LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts