Public catalogue

AO Registry

Signed agents, skills, MCP definitions and bundles for Agent Orchestrator. Every publication is an immutable, cryptographically signed version. Your instance only installs what a workspace administrator confirms.

Release 2026.10.26-2 · sequence 2 · channel stable · signed with prod-registry-1 · 2026-10-26

16 of 28 entries

MCP serverv1.0.0

Atlassian (Confluence & Jira)

simplifier/atlassian

Read and write Jira issues and Confluence pages. Contains internal documentation, so its read tools are a disclosure risk even though they change nothing.

AO verified Risk: high
#atlassian #confluence #credentials #jira
MCP serverv1.0.0

Brave Search

simplifier/brave-search

Web and local search through the Brave Search API. Needs a Brave API subscription key.

AO verified Risk: low
#credentials #network #search #web
MCP serverv1.0.0

Fetch

simplifier/fetch

Fetch a URL and convert the response to Markdown, so an agent can read documentation or a web page. Outbound network access with no allow-list.

AO verified Risk: medium
#http #network #web
MCP serverv1.0.0

Filesystem

simplifier/filesystem

Read and write files under explicitly allowed directories. The safest server to start with: everything it can touch is a directory you chose.

AO verified Risk: low
#files #local #no-credentials
MCP serverv1.0.0

Git

simplifier/git

Inspect a local repository's history, diffs and branches. Read-only against remote hosts unless you give it push or pull tooling in the arguments.

AO verified Risk: medium
#git #local #no-credentials #vcs
MCP serverv1.0.0

GitHub

simplifier/github

The official GitHub MCP server, talking to the GitHub API over HTTPS. Reaches repositories, issues, pull requests and workflows — treat its write tools as high-impact.

AO verified Risk: high
#credentials #github #remote #source-control
MCP serverv1.0.0

GitLab

simplifier/gitlab

Projects, merge requests, issues and pipelines over the GitLab API. A GitLab access token is required.

AO verified Risk: high
#credentials #gitlab #remote #source-control
MCP serverv1.0.0

Knowledge Graph Memory

simplifier/memory

Store and retrieve entities and relations as a local knowledge graph. Writes to disk in the server's own directory only.

AO verified Risk: low
#graph #local #memory #no-credentials
MCP serverv1.0.0

Linear

simplifier/linear

Linear issues, projects and cycles. Mutating tools create and close real work items in other people's backlogs.

AO verified Risk: high
#credentials #issues #linear
MCP serverv1.0.0

Notion

simplifier/notion

Search, read and update Notion pages and databases. The integration token must be explicitly shared with each page it may touch.

AO verified Risk: medium
#credentials #docs #notion
MCP serverv1.0.0

PostgreSQL

simplifier/postgres

Run read-only SQL against a PostgreSQL database. Point it at a replica, never at the primary of a system of record.

AO verified Risk: high
#database #read-only #sql
MCP serverv1.0.0

Prometheus

simplifier/prometheus

Query a Prometheus server for metrics, and read alert rules and their firing state. Read-only against the monitoring backend.

AO verified Risk: low
#credentials #metrics #monitoring #prometheus
MCP serverv1.0.0

Sentry

simplifier/sentry

Read errors, stack traces and release health from Sentry, and create/resolve issues. Read-only for triage, write-capable for issue management.

AO verified Risk: medium
#credentials #errors #observability #sentry
MCP serverv1.0.0

Slack

simplifier/slack

Post messages and read channel history in a Slack workspace. Writing here is visible to humans immediately, which is why this is rated high.

AO verified Risk: high
#chat #credentials #messaging #slack
MCP serverv1.0.0

SQLite

simplifier/sqlite

Query a local SQLite database file. No network involved, so the blast radius is exactly the file you point it at.

AO verified Risk: medium
#database #local #no-credentials #sql
MCP serverv1.0.0

Time

simplifier/time

Current time and timezone conversion. No network, no filesystem, no credentials — the minimal example of a server that can do nothing harmful.

AO verified Risk: low
#local #no-credentials #time #utility

The trust level is declared in each artifact and checked when it is merged; it is not a certification. A published version never changes.