MCP Morning — Sat, Oct 17, 2026
Good morning. A weekend mix: reverse engineering in Ghidra, your Zotero library, a 3D building editor, Blender scenes and a repo that teaches your agent to turn single-player games into co-op. Plus how the Claude Code team reviews code at agent volume.
Trending & new MCPs
- Ghidra MCP — A Ghidra extension plus a Python bridge that exposes 209 MCP tools for reverse engineering, with write access for renaming, typing, comments, structures, scripts, P-code emulation and live debugging, in GUI or headless mode. Why it matters: most Ghidra integrations stop at read-only lookups. This one also enforces naming and typing conventions in the tool layer (auto-fix, warn or reject), so output stays consistent across sessions and models. The extension only loads in the exact Ghidra version it was built for. 5,710 ⭐ on GitHub.
- Zotero MCP — Connects a Zotero research library to Claude, ChatGPT, Cursor and other assistants: search (including semantic search), read metadata, BibTeX, full text and PDF pages, annotate, and add papers by DOI, URL or ISBN.
Why it matters: one package ships three routes: an MCP server for chat apps, a CLI plus agent skill for shell-based agents (the project says it costs 98 tokens of context until needed, instead of about 17k), and a chat panel inside Zotero. Local mode reads straight from
zotero.sqlite. 5,439 ⭐ on GitHub. - Pascal Editor — An open-source, local-first 3D building editor (React Three Fiber and WebGPU) that runs in the browser or from a CLI, with an MCP service agents can connect to.
Why it matters:
npx @pascal-app/cli editorstarts the editor and an authenticated local MCP service, and agents launchpascal mcp connectwithout needing an account or API key. It also ships agent skills and a Claude Code plugin, and self-hosts as a single container. 24,921 ⭐ on GitHub. - mcp-for-blender-pro — A Blender add-on with a visual chat workspace and a built-in MCP server: 21 scene tools to inspect, create, edit, screenshot, search assets and export. Why it matters: you can run one model or a manager, workers and reviewers chain against your scene, with OpenAI, Claude, Gemini, OpenRouter, Ollama or custom endpoints. Other clients connect over authenticated Streamable HTTP. The release targets Windows x64 with Blender 4.2 or later. New this week, 367 ⭐.
- Co-op Anything — A playbook, agent skills and a small MCP server that point a coding agent at a single-player game and work toward a co-op mod: research what exists, reverse engineer if needed, test with bots in the game and package for Steam relay. Why it matters: the MCP server searches the project's co-op directory, detects a game's engine from its install folder and validates contributions; it suggests pairing with a reverse-engineering MCP for the binary work. The README lists Deus Ex co-op as released, with more in progress. New this week, 88 ⭐.
Agent story
How the Claude Code team does code review (HN) — Addy Osmani, Morgan Westlee Lunt and Qing Wang describe how the Claude Code team reviews code when Claude writes most of it. The post says merged pull requests more than doubled from June to September while the share reverted fell by more than 40 percent. Review now happens in layers: Claude verifies its own work and a second agent reviews the diff before a PR exists, then required CI, parallel AI bug hunting with verifiers voting on findings, a separate security pass, and a risk classifier that decides whether zero, one or two humans must approve. Merge queues, feature flags, internal dogfooding and fast rollback catch the rest. The goal they track is minimal human review time with no rise in reverts or incidents. 350 points on Hacker News.
Rising this week
Biggest week-over-week npm download growth in our rankings. npm hasn't published daily counts past Oct 12 yet, so these figures cover the week ending Oct 12:
- e2e — 346,051 downloads (+271%)
- cachly-mcp — 5,388 (+1,345%)
- codebase-doctor — 3,180 (+1,522%)
- alphacouncil-agent — 2,317 (+1,543%)
- brilliant-directories-mcp — 3,560 (+892%)
Downloads include CI and bot traffic, so treat these as signals, not endorsements. How we rank →
MCP Morning lists servers from public data (the official MCP Registry, GitHub, npm and PyPI). We don't run or test them, so review the code and permissions before you connect one to your agent.