AI News HubLIVE
In-site rewrite2 min read

Show HN: A Trust Index for MCP Servers

A security scoring system for MCP servers that continuously scans for tool poisoning, prompt injection, supply-chain, and credential risks. Each version gets a single score before agents connect. Out of 12,629 scored servers, 45% received an A grade, while 10% are high-risk (D/F).

SourceHacker News AIAuthor: mavzer

Security scores for every MCP server.

Continuously scanned for tool poisoning, prompt injection, supply-chain, and credential risk. One score per version — before your agents connect.

Browse all 16,129 servers →

The MCP ecosystem, scored

Every server independently scanned and scored for security — here's how the ecosystem looks so far.

12,629

Servers scored

45%

Rated A · strong posture

1,262

High-risk (D/F)

4,263

Live-verified endpoints

Grade distribution

12,629 scored servers

A5,663 · 45%

B5,299 · 42%

C405 · 3%

D964 · 8%

F298 · 2%

3,447 unverifiable

Need API access?

Check any MCP server's security score from your own tools — CI gates, procurement review, agent allow-lists. Key-authenticated, rate-limited.

Top scored

100

mockservercom.mock-serverv7.4.0

Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.

99

mcp-file-toolsio.github.dimitar-grigorovv1.7.1

Non-UTF-8/Unicode encoding: CP1251, CP1252, KOI8-R, ISO-8859 with auto-detection

99

raven-nest-mcpio.github.tidynestv0.2.6

AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

98

mediawiki-mcp-serverio.github.olgasafonovav1.32.1

Search, read, and edit any MediaWiki wiki. Works with Wikipedia, Fandom, and more.

98

trilium-mcpio.github.OVDEN13v0.1.5

Read and write a self-hosted TriliumNext knowledge base over its ETAPI.

98

mcp-serverio.github.profitelligencev1.0.2

Financial intelligence: insider trades, SEC filings, 13F holdings, and market signals.

Needs review

13

openbrowser-aime.openbrowserv0.1.50

AI browser automation. Write async Python to navigate, click, type, and extract data.

13

skylosio.github.duriantacov3.5.10

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

13

serenaio.github.oraiosv1.5.3

A powerful toolkit for coding, providing semantic retrieval and editing capabilities.

14

onetool-mcpio.github.beycomv2.2.2

One MCP for devs incl Brave,Google,Tavily,Context7,AWS,Excalidraw,DB,GitHub,DevTools,Playwright

14

cognirepoio.github.ashlesh-tv1.1.1

FAISS, call graph, AST, BM25 — 34 MCP tools for AI agents. 50-80% token reduction. Offline.

14

aegisio.github.Acacianv0.1.7

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

Recently scanned

View all →

84

stackapps-suite-mcpio.github.Explorer-64v0.1.7

StackApps suite gateway: PWA icons, splash screens, AI images. Pay per call in USDC via x402.

91

figma-mcp-expressio.github.sunhome243v2.8.0

Compact Figma MCP with validated batch ops through a local plugin bridge.

43

samotpravil-mcpio.github.dkansterv1.3.2

MCP server for Samotpravil API — docs, typed tools, Python SDK parity, safety flags.

40

miniurlio.github.addychangv1.0.0

Create, manage, organize, and analyze short links with MiniURL's remote MCP server.

40

brafinderio.github.fenrici1v1.0.0

Neutral cross-brand bra-size translation and a live in-stock bra catalog by size.

89

geo-auditio.verityscorev1.0.2

GEO audit for Shopify: AI readiness score, recommendations, and 15 vertical checklists.