Registry · Re-scanned weekly
Every grade, one page.
The registry is a set of static Trust Cards for public MCP servers — independently scanned snapshots, not self-reports. Search, filter, and open any card for file:line evidence.
50 external targets (1 graded, 49 ungraded); 3 self-scans / fixtures, excluded from external statistics. Average graded external score: 96.0/100. D/F: 0 of 1 graded external targets.
U means insufficient static coverage, not a zero score or a safety verdict. Ungraded targets are excluded from score rankings and averages. Histogram and filters include all displayed targets, including labeled self-scans.
| Grade | Server | Score | Findings | Scope | Badge |
|---|---|---|---|---|---|
| A | wong2__mcp-cli | 96 | 0 (0 crit) | minimal |  |
| A | opentrustbench CLI (packages/cli) Self-scan / fixture | 90 | 0 (0 crit) | minimal |  |
| F | examples/vulnerable-mcp-server Self-scan / fixture | 33 | 5 (3 crit) | excessive |  |
| U | ahujasid__blender-mcp Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 50 analyzed / 74 discovered files. Open report for details. | Ungraded | 9 (3 crit) | excessive |  |
| U | apify__actors-mcp-server Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 385 analyzed / 441 discovered files. Open report for details. | Ungraded | 7 (4 crit) | excessive |  |
| U | browserbase__mcp-server-browserbase Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 37 analyzed / 53 discovered files. Open report for details. | Ungraded | 3 (3 crit) | excessive |  |
| U | ClickHouse__mcp-clickhouse Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 53 analyzed / 66 discovered files. Open report for details. | Ungraded | 2 (1 crit) | moderate |  |
| U | cloudflare__mcp-server-cloudflare Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 293 analyzed / 484 discovered files. Open report for details. | Ungraded | 15 (3 crit) | excessive |  |
| U | e2b-dev__mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 13 analyzed / 30 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | elastic__mcp-server-elasticsearch Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage; Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 8 analyzed / 38 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | exa-labs__exa-mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 65 analyzed / 87 discovered files. Open report for details. | Ungraded | 0 (0 crit) | broad |  |
| U | examples/secure-agent-skill Self-scan / fixture Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 0 analyzed / 1 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | Flux159__mcp-server-kubernetes Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 125 analyzed / 145 discovered files. Open report for details. | Ungraded | 2 (0 crit) | excessive |  |
| U | getsentry__sentry-mcp Insufficient static coverage: Unsupported source present; Scan limits reached; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 2174 analyzed / 2473 discovered files. Open report for details. | Ungraded | 86 (30 crit) | excessive |  |
| U | github__github-mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 40 analyzed / 660 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | GongRzhe__Gmail-MCP-Server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 12 analyzed / 19 discovered files. Open report for details. | Ungraded | 0 (0 crit) | excessive |  |
| U | grafana__mcp-grafana Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 199 analyzed / 588 discovered files. Open report for details. | Ungraded | 2 (1 crit) | excessive |  |
| U | hashicorp__terraform-mcp-server Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage; Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 24 analyzed / 389 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | jlowin__fastmcp Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 993 analyzed / 1816 discovered files. Open report for details. | Ungraded | 50 (23 crit) | excessive |  |
| U | korotovsky__slack-mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 19 analyzed / 80 discovered files. Open report for details. | Ungraded | 0 (0 crit) | broad |  |
| U | langchain-ai__langchain-mcp-adapters Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 35 analyzed / 47 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | makenotion__notion-mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 36 analyzed / 52 discovered files. Open report for details. | Ungraded | 4 (0 crit) | moderate |  |
| U | mcp-everything Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 74 analyzed / 85 discovered files. Open report for details. | Ungraded | 1 (0 crit) | broad |  |
| U | mcp-fetch Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 10 analyzed / 17 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | mcp-filesystem Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 24 analyzed / 27 discovered files. Open report for details. | Ungraded | 0 (0 crit) | broad |  |
| U | mcp-git Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 9 analyzed / 17 discovered files. Open report for details. | Ungraded | 1 (0 crit) | moderate |  |
| U | mcp-memory Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 19 analyzed / 22 discovered files. Open report for details. | Ungraded | 11 (0 crit) | excessive |  |
| U | mcp-sequentialthinking Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 16 analyzed / 19 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | mcp-time Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 7 analyzed / 13 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | mcp-use__mcp-use Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 1540 analyzed / 2278 discovered files. Open report for details. | Ungraded | 71 (27 crit) | excessive |  |
| U | mendableai__firecrawl-mcp-server Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 84 analyzed / 99 discovered files. Open report for details. | Ungraded | 7 (3 crit) | excessive |  |
| U | microsoft__playwright-mcp Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 21 analyzed / 39 discovered files. Open report for details. | Ungraded | 0 (0 crit) | excessive |  |
| U | modelcontextprotocol__csharp-sdk Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 48 analyzed / 885 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | modelcontextprotocol__go-sdk Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage; Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 13 analyzed / 227 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | modelcontextprotocol__inspector Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 1557 analyzed / 1667 discovered files. Open report for details. | Ungraded | 95 (34 crit) | excessive |  |
| U | modelcontextprotocol__java-sdk Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage; Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 10 analyzed / 381 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | modelcontextprotocol__kotlin-sdk Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 17 analyzed / 382 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | modelcontextprotocol__python-sdk Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 914 analyzed / 1726 discovered files. Open report for details. | Ungraded | 7 (6 crit) | broad |  |
| U | modelcontextprotocol__registry Insufficient static coverage: No non-empty supported source analyzed; documentation and data alone provide limited coverage; Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 30 analyzed / 258 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | modelcontextprotocol__typescript-sdk Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 1004 analyzed / 1160 discovered files. Open report for details. | Ungraded | 81 (4 crit) | excessive |  |
| U | mongodb-js__mongodb-mcp-server Insufficient static coverage: Unsupported source present; Scan limits reached. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 747 analyzed / 800 discovered files. Open report for details. | Ungraded | 13 (8 crit) | excessive |  |
| U | motherduckdb__mcp-server-motherduck Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 37 analyzed / 47 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | neondatabase__mcp-server-neon Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 181 analyzed / 265 discovered files. Open report for details. | Ungraded | 14 (11 crit) | excessive |  |
| U | pinecone-io__pinecone-mcp Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 59 analyzed / 82 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | PrefectHQ__prefect-mcp-server Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 101 analyzed / 126 discovered files. Open report for details. | Ungraded | 1 (1 crit) | minimal |  |
| U | qdrant__mcp-server-qdrant Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 26 analyzed / 34 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | redis__mcp-redis Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 50 analyzed / 60 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | sooperset__mcp-atlassian Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 359 analyzed / 420 discovered files. Open report for details. | Ungraded | 2 (2 crit) | broad |  |
| U | sparfenyuk__mcp-proxy Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 23 analyzed / 31 discovered files. Open report for details. | Ungraded | 0 (0 crit) | moderate |  |
| U | stripe__agent-toolkit Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 447 analyzed / 1087 discovered files. Open report for details. | Ungraded | 10 (0 crit) | excessive |  |
| U | supabase-community__supabase-mcp Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 133 analyzed / 159 discovered files. Open report for details. | Ungraded | 3 (1 crit) | excessive |  |
| U | tavily-ai__tavily-mcp Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 7 analyzed / 15 discovered files. Open report for details. | Ungraded | 0 (0 crit) | minimal |  |
| U | upstash__context7 Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety. Coverage: limited; 204 analyzed / 531 discovered files. Open report for details. | Ungraded | 15 (9 crit) | excessive |  |
Badge adoption: 0 of 44 scanned repos display their grade (checked 2026-10-12).
Dated snapshot (2026-10-19), engine v0.1.3. Static analysis only — findings need triage. How scoring works · State of MCP report.