# ☕ MCP Morning — Tue, Oct 27, 2026

Good morning. Today's picks lean toward tools that sit next to something you already use: Mozilla's own Firefox server for agents, Bitwarden's vault server, handwritten pages in an iPad notebook app, Valve's Source 2 games driven over the console, and the Hopper disassembler. The story is a desktop app that runs an agent on your own computer with open-weight models.

## 🔥 Trending & new MCPs

- **[Firefox DevTools MCP](https://github.com/mozilla/firefox-devtools-mcp)** — Mozilla's MCP server that lets agents use Firefox, either to browse (read pages, fill forms, go through multi-step flows) or to inspect the page you're building with the console, network requests, debugger and profiler.
  *Why it matters:* it drives Firefox through WebDriver BiDi, runs with `npx @mozilla/firefox-devtools-mcp@latest`, and comes with tool presets, so `--tool-preset slim` drops `evaluate_script` while `developer` adds debugging and profiling. The README's own advice is to use a dedicated Firefox profile, since the agent can reach whatever the browser can, cookies included. 526 ⭐ on GitHub.
- **[Bitwarden MCP Server](https://github.com/bitwarden/mcp-server)** — Bitwarden's official server that gives an AI client vault access through the Bitwarden CLI and organization admin through its Public API.
  *Why it matters:* vault tools cover listing, creating, editing and deleting items, TOTP codes, Sends and device approvals; the admin side handles members, groups, collections, policies and audit logs. The README is blunt that this means the assistant can read your passwords, says it must run only locally and never on a public server, and suggests local models for sensitive data. GPL-3.0, 298 ⭐ on GitHub.
- **[noteful-mcp](https://github.com/openninoor/noteful-mcp)** — An MCP server for the iPad note-taking app Noteful that reads your notebooks the way the app draws them and writes new pages in real, editable Noteful ink.
  *Why it matters:* it knows what you highlighted and what you hid under tape, and it turns Markdown into handwriting, highlighter and hand-drawn diagrams you can lasso and recolour. The format was reverse engineered, so it's marked beta; reading never changes your library and writing only creates new files. Created yesterday; MIT, 11 ⭐ on GitHub.
- **[source2mcp](https://github.com/ValveResourceFormat/Source2Mcp)** — Drives Source 2 games (CS2, Deadlock, Dota 2 and Half-Life: Alyx) through VConsole2, the engine's console protocol, without injecting code into the game.
  *Why it matters:* the tools launch the game, load local maps, run console commands, move the camera and save screenshots, and it shares camera conventions with Source 2 Viewer so you can compare a rendered frame between the two. It always starts the game with `-insecure` and `sv_cheats 1` and refuses `connect`, so keep it away from online play. Windows and .NET only; MIT, 5 ⭐ on GitHub.
- **[HopperMCP](https://github.com/LiYanan2004/HopperMCP)** — A standalone MCP server plus plugin for the Hopper disassembler on macOS, with 48 tools.
  *Why it matters:* 34 tools follow Hopper v6's own tool names (procedures, strings, pseudocode, callers, xrefs, comments, labels), and 14 go further, including `invoke_api` for native Objective-C methods and `write_bytes` to patch the binary, so think about which ones your agent gets. You build it yourself with a Swift 6 toolchain; it works with Hopper 4 to 6. 1 ⭐ on GitHub, no license file yet.

## 🗞️ Agent story

**[Hob](https://github.com/FrigadeHQ/hob)** ([HN](https://news.ycombinator.com/item?id=50246238)) — Frigade released Hob, an MIT-licensed desktop app for Mac, Windows and Linux that aims at what Claude and ChatGPT's desktop apps do (work on your files, run code, search the web, ask before changing anything) but with models running on your own machine through llama.cpp. It checks your hardware and picks a model for you: Gemma 4 for most computers, from E4B Compact on 8 GB Macs up to 26B from 24 GB, and gpt-oss 120B on workstations. It asks for approval before changing files in your folders, has Undo for every task, and runs code in a sandbox limited to the chat's folder. Plugins can add skills in the Agent Skills format, Python tools and connectors to any MCP server, including `.mcpb` bundles. The docs say there's no telemetry, and that it only goes online for model downloads, web access and the connectors you add. 147 points on Hacker News.

## 🚀 Rising this week

Biggest week-over-week download growth in [our rankings](https://mcpmorning.com/mcp/rising/), skipping two servers we covered in the last week:

1. **[google-health-mcp](https://mcpmorning.com/mcp/davidmosiah-google-health-mcp/)** — 1,081 downloads (+848%)
2. **[Trusty Squire](https://mcpmorning.com/mcp/trusty-squire-trusty-squire/)** — 12,276 (+630%)
3. **[NVIDIA Elements](https://mcpmorning.com/mcp/nvidia-elements/)** — 769 (+612%)
4. **[mobai-mcp](https://mcpmorning.com/mcp/mobai-app-mobai-mcp/)** — 701 (+443%)
5. **[plur](https://mcpmorning.com/mcp/plur-ai-plur/)** — 671 (+441%)

npm's public download counts still end on Oct 22, so npm numbers here haven't moved since last week. Downloads include CI and bot traffic, so treat these as signals, not endorsements. [How we rank →](https://mcpmorning.com/methodology/)

---

*MCP Morning lists servers from public data (the official MCP Registry, GitHub, npm and PyPI). We don't run or test them, so review the code and permissions before you connect one to your agent.*