MCP Morning — Fri, Oct 23, 2026
Good morning. Today's picks lean toward agents with guardrails: your Garmin data on Garmin's new official API, throwaway microVMs on AWS, web scraping with a keyless free tier, n8n workflow building, and a TypeScript framework for MCP servers. The story is NVIDIA's open-source runtime for keeping agent fleets inside a policy.
Trending & new MCPs
- garmin-personal-mcp — Ask an AI client about your sleep, HRV, Body Battery, stress, training load, weight or a specific run, straight from your Garmin Connect account.
Why it matters: most Garmin MCP servers log in with your Garmin password through an unofficial library. This one uses the Personal API Garmin opened to individuals this month, with a revocable key and Garmin's own Python client, and it's read-only. It runs with
uvx garmin-personal-mcpafter a one-timeauthstep. It isn't made by Garmin. Created on Oct 22, 23 ⭐ on GitHub. - agent-microvm — A Python SDK, CLI and MCP server (
vmnest) that gives each agent session its own Firecracker microVM on AWS Lambda MicroVMs. Why it matters: model-generated code gets VM-level isolation instead of a container that shares the host kernel, with suspend and resume for up to 8 hours. Infrastructure is provisioned with plainboto3, and egress can be routed through a security group you own. You need an AWS account; install withpip install "vmnest[mcp]"and start the server withvmnest mcp. Created on Oct 21, 46 ⭐ on GitHub. - firecrawl-mcp-server — Firecrawl's official MCP server: search, scrape, crawl and map sites, parse PDFs, interact with pages in a real browser, and monitor pages for changes.
Why it matters: there's a hosted endpoint at
https://mcp.firecrawl.dev/v2/mcp, and on its keyless free tierscrape,searchandparsework without an API key (rate-limited). Crawl, map and agent jobs still need a key. The README also says which tool fits which job, which helps keep credit use down. MIT, 7,672 ⭐ on GitHub. - n8n-mcp — Gives AI assistants structured knowledge of n8n's nodes, properties, operations and templates, so they can design and validate workflows. Why it matters: the README claims coverage of 3,143 nodes (841 core and 2,302 community) and 2,352 workflow templates, plus 21 optional tools that manage a live n8n instance when you supply its API URL and key. The author's own warning is worth repeating: never let AI edit production workflows directly. Self-host with npx or Docker, or use the hosted free tier of 100 tool calls a day. MIT, 23,124 ⭐ on GitHub.
- mcp-use — A TypeScript framework for building, testing and shipping MCP servers, ChatGPT apps and Claude connectors.
Why it matters: if you're writing a server rather than installing one,
npx -y create-mcp-use-app@latestscaffolds a typed project with Zod schemas, React views bound to tools, and a built-in inspector atlocalhost:3000/mcp/inspector. Version 2 is out, with a migration guide for v1 projects. MIT, 10,801 ⭐ on GitHub.
Agent story
OpenShell: a safe, private runtime for fleets of autonomous AI agents (HN) — NVIDIA's open-source OpenShell runs each agent in an isolated sandbox and enforces a declared policy at the kernel level on every file access, system call and network connection. Agents never see real credentials; OpenShell adds them only to requests going to approved endpoints. Before a policy change is applied, it uses formal verification to flag risky new access, like reaching a new host with credentials, so that change waits for human review. It runs on Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental), and recently moved to a stable 0.1.x release cadence. It's the same question many MCP users face: how much an agent with tools should be allowed to touch. 402 points on Hacker News.
Rising this week
Biggest week-over-week download growth in our rankings, skipping one server we've already covered three times:
- Gnosis MCP — 1,291 downloads (+707%)
- CLIO Adios — 6,397 (+334%)
- Webull OpenAPI — 1,601 (+157%)
- Data Olympus — 1,130 (+138%)
- M3 Memory — 1,020 (+98%)
npm's public download counts still end on Oct 18, so npm numbers here haven't moved since last weekend. Downloads include CI and bot traffic, so treat these as signals, not endorsements. How we rank →
MCP Morning lists servers from public data (the official MCP Registry, GitHub, npm and PyPI). We don't run or test them, so review the code and permissions before you connect one to your agent.