Skip to content
AI News HubLIVE
In-site rewrite2 min read

Show HN: A Trust Index for MCP Servers

Summary

A security scoring system for MCP servers that continuously scans for tool poisoning, prompt injection, supply-chain, and credential risks. Each version gets a single score before agents connect. Out of 12,629 scored servers, 45% received an A grade, while 10% are high-risk (D/F).

SourceHacker News AIAuthor: mavzer
Show HN: A Trust Index for MCP Servers
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions
Read article

Security scores for every MCP server.

Continuously scanned for tool poisoning, prompt injection, supply-chain, and credential risk. One score per version — before your agents connect.

Browse all 16,129 servers →

The MCP ecosystem, scored

Every server independently scanned and scored for security — here's how the ecosystem looks so far.

12,629

Servers scored

45%

Rated A · strong posture

1,262

High-risk (D/F)

4,263

Live-verified endpoints

Grade distribution

12,629 scored servers

A5,663 · 45%

B5,299 · 42%

C405 · 3%

D964 · 8%

F298 · 2%

3,447 unverifiable

Need API access?

Check any MCP server's security score from your own tools — CI gates, procurement review, agent allow-lists. Key-authenticated, rate-limited.

Top scored

100

mockservercom.mock-serverv7.4.0

Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.

99

mcp-file-toolsio.github.dimitar-grigorovv1.7.1

Non-UTF-8/Unicode encoding: CP1251, CP1252, KOI8-R, ISO-8859 with auto-detection

99

raven-nest-mcpio.github.tidynestv0.2.6

AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

98

mediawiki-mcp-serverio.github.olgasafonovav1.32.1

Search, read, and edit any MediaWiki wiki. Works with Wikipedia, Fandom, and more.

98

trilium-mcpio.github.OVDEN13v0.1.5

Read and write a self-hosted TriliumNext knowledge base over its ETAPI.

98

mcp-serverio.github.profitelligencev1.0.2

Financial intelligence: insider trades, SEC filings, 13F holdings, and market signals.

Needs review

13

openbrowser-aime.openbrowserv0.1.50

AI browser automation. Write async Python to navigate, click, type, and extract data.

13

skylosio.github.duriantacov3.5.10

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

13

serenaio.github.oraiosv1.5.3

A powerful toolkit for coding, providing semantic retrieval and editing capabilities.

14

onetool-mcpio.github.beycomv2.2.2

One MCP for devs incl Brave,Google,Tavily,Context7,AWS,Excalidraw,DB,GitHub,DevTools,Playwright

14

cognirepoio.github.ashlesh-tv1.1.1

FAISS, call graph, AST, BM25 — 34 MCP tools for AI agents. 50-80% token reduction. Offline.

14

aegisio.github.Acacianv0.1.7

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

Recently scanned

View all →

84

stackapps-suite-mcpio.github.Explorer-64v0.1.7

StackApps suite gateway: PWA icons, splash screens, AI images. Pay per call in USDC via x402.

91

figma-mcp-expressio.github.sunhome243v2.8.0

Compact Figma MCP with validated batch ops through a local plugin bridge.

43

samotpravil-mcpio.github.dkansterv1.3.2

MCP server for Samotpravil API — docs, typed tools, Python SDK parity, safety flags.

40

miniurlio.github.addychangv1.0.0

Create, manage, organize, and analyze short links with MiniURL's remote MCP server.

40

brafinderio.github.fenrici1v1.0.0

Neutral cross-brand bra-size translation and a live in-stock bra catalog by size.

89

geo-auditio.verityscorev1.0.2

GEO audit for Shopify: AI readiness score, recommendations, and 15 vertical checklists.

Key points and analysis

Article intelligence

EngineersIntermediate

Key points

  • Over 12,600 servers scored, with 45% rated A
  • Top-scored servers include mockservercom (100) and mcp-file-tools (99)
  • High-risk servers (D/F) account for 10% of scored servers
  • API access available for CI gates, procurement review, and agent allow-lists

Highlights and analysis are generated automatically and may contain errors. Check the original source.