Mirobody

Why this score

Installs in real projects: we can't search for this one (it has no fixed package name or address), so it's scored as a typical MCP server.

Popularity score: 69/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Nov 4, 2026 at the PyPI package mirobody@1.5.10, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.

What its code does:

• Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.
• Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.mirobody/agent/js_sandbox.py:75 and 2 more
• Makes network requestsmirobody/agent/probe.py:203, mirobody/server/routers/setup_router.py:214, mirobody/utils/config/served.py:45 and 4 more

Web addresses in its code:

• loinc.orgmirobody/engine/observation.py:20
• medlineplus.govmirobody/agent/knowledge/build.py:37
• openrouter.aimirobody/agent/middleware/prompt_caching.py:14
• developer.apple.commirobody/standardize/devices.py:60
• platform.openai.commirobody/agent/middleware/prompt_caching.py:15
• clinicaltrials.govmirobody/agent/knowledge/online.py:21
• developer.honor.commirobody/standardize/devices.py:81
• developer.huawei.commirobody/standardize/devices.py:74
• docs.anthropic.commirobody/agent/middleware/prompt_caching.py:13
• files.cpicpgx.orgmirobody/standardize/cpic_extract.py:20
• hl7.orgmirobody/kernel/meds.py:56
• mirobody.aimirobody/engine/observation.py:22
• open.oppomobile.commirobody/standardize/devices.py:132
• terminology.hl7.orgmirobody/server/routers/genomics_router.py:86
• unitsofmeasure.orgmirobody/engine/observation.py:21

And 35 more.

These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Nothing from another maker does quite the same job yet.