MCP Security Index

Weekly grade across 145 public MCP servers. Scanner: agent-audit-kit. Snapshot: 2026-09-07T13:33+00:00.

New vulnerabilities are reported privately first and surfaced here only after our 90-day disclosure policy window.

Week-over-week grade distribution

147 0 A B C D F 2026-08-21 2026-09-07
#ServerGradeScoreCriticalsHighsLast scanned
1 Dynokostya/just-works/.mcp.json.default no-findings A 100/100 0 0 2026-09-07
2 indranilbanerjee/digital-marketing-pro/.mcp.json.connectors-reference embargoed A 98/100 0 0 2026-09-07
3 00PrabalK00/OpenRosWarehouse embargoed A 95/100 0 0 2026-09-07
4 AssafWoo/homebrew-pandafilter embargoed A 95/100 0 0 2026-09-07
5 Bike4Mind/bike4mind embargoed A 95/100 0 0 2026-09-07
6 MercurieVV/ScalaSemantic/.mcp.json.example embargoed A 95/100 0 0 2026-09-07
7 PierreKieffer/http-tanker embargoed A 95/100 0 0 2026-09-07
8 Tattzy25/Digital-Hustle-Memory/.mcp.json.template embargoed A 95/100 0 0 2026-09-07
9 aegntic/aegntic-MCP/quick-data/.mcp.json.sample embargoed A 95/100 0 0 2026-09-07
10 alessandro9110/Speech-To-Text-With-Databricks/.mcp.json.bak embargoed A 95/100 0 0 2026-09-07
11 alphaplapplap/mcp-memory-service/.mcp.json.template embargoed A 95/100 0 0 2026-09-07
12 axpolik/claude-code-d365fo-mcp embargoed A 95/100 0 0 2026-09-07
13 brettmartin97/codegraph embargoed A 95/100 0 0 2026-09-07
14 davebream/claude-of-alexandria/.mcp.json.bak embargoed A 95/100 0 0 2026-09-07
15 disler/quick-data-mcp/quick-data-mcp/.mcp.json.sample embargoed A 95/100 0 0 2026-09-07
16 lisophorm/mcp-memory-service/.mcp.json.template embargoed A 95/100 0 0 2026-09-07
17 undergroundrap/UEFN-TOOLBELT/.mcp.json.template embargoed A 95/100 0 0 2026-09-07
18 vobase/vobase embargoed A 95/100 0 0 2026-09-07
19 vtrivedy/claude-banana-story-agent/.mcp.json.template embargoed A 95/100 0 0 2026-09-07
20 DanielLavrushin/b4/.mcp.json.template embargoed A 93/100 0 0 2026-09-07
21 openshift-eng/ai-helpers/plugins/agentic-docs/.mcp.json.sample embargoed A 93/100 0 0 2026-09-07
22 orcasecurity/orca-skills/.mcp.json.template embargoed A 93/100 0 0 2026-09-07
23 2mawi2/para/.mcp.json.template embargoed A 90/100 0 0 2026-09-07
24 Bato21/KimunKo embargoed A 90/100 0 0 2026-09-07
25 DevinoSolutions/stealth-chrome-devtools-mcp/.mcp.json.bak-2026-07-31 embargoed A 90/100 0 0 2026-09-07
26 EdgeHop/EdgeHop/.mcp.json.sample embargoed A 90/100 0 0 2026-09-07
27 FlorianBruniaux/claude-code-ultimate-guide/.mcp.json.pre-leanctx embargoed A 90/100 0 0 2026-09-07
28 LeagueAkari/LeagueAkari embargoed A 90/100 0 0 2026-09-07
29 OpenWaggle/OpenWaggle embargoed A 90/100 0 0 2026-09-07
30 TimothyVang/verdict-dfir/.mcp.json.docker embargoed A 90/100 0 0 2026-09-07
31 TurtleMcTurtle/claude-code-ultimate-guide/.mcp.json.pre-leanctx embargoed A 90/100 0 0 2026-09-07
32 alexica00/claude-code-ultimate-guide/.mcp.json.pre-leanctx embargoed A 90/100 0 0 2026-09-07
33 bethington/ghidra-mcp embargoed A 90/100 0 0 2026-09-07
34 cklose2000/pinescript-mcp-server/.mcp.json.windows.example embargoed A 90/100 0 0 2026-09-07
35 disler/nano-agent/.mcp.json.sample embargoed A 90/100 0 0 2026-09-07
36 jnarowski/agentcmd/.mcp.json.chrome embargoed A 90/100 0 0 2026-09-07
37 jnarowski/agentcmd/.mcp.json.playwright embargoed A 90/100 0 0 2026-09-07
38 lilhammerfun/clumsies/packages/clumsies/.mcp.json.tpl embargoed A 90/100 0 0 2026-09-07
39 lucaslorentz/durabletask-extensions embargoed A 90/100 0 0 2026-09-07
40 slysik/nano-agent/.mcp.json.sample embargoed A 90/100 0 0 2026-09-07
41 tumourlove/monolith/Templates/.mcp.json.proxy.example embargoed A 90/100 0 0 2026-09-07
42 usrivastava92/gtv-desktop-remote embargoed A 90/100 0 0 2026-09-07
43 wikilabs/editions/info-session-server/.mcp.json embargoed A 90/100 0 0 2026-09-07
44 wrayboss/trading-jarvis-codex-plugin embargoed A 90/100 0 0 2026-09-07
45 zalom/plastic embargoed A 90/100 0 0 2026-09-07
46 d2a8k3u/claude-code-memory/.mcp.json.template embargoed B 85/100 0 1 2026-09-07
47 lancejames221b/agent-hivemind/.mcp.json.disabled embargoed B 85/100 0 1 2026-09-07
48 louis49/melchizedek/.mcp.json.template embargoed B 85/100 0 1 2026-09-07
49 samuelzxu/claude-evolve/.mcp.json.plugin embargoed B 85/100 0 1 2026-09-07
50 weiserman/rap-skills/.mcp.json.template embargoed B 85/100 0 1 2026-09-07
51 Dicklesworthstone/mcp_agent_mail_rust/docs/examples/mcp/factory.mcp.json.template embargoed B 83/100 0 1 2026-09-07
52 cat-xierluo/legal-skills/skills/yuandian-law-search/scripts/.mcp.json.example embargoed B 83/100 0 0 2026-09-07
53 Consiliency/Code-Index-MCP/.mcp.json.fixed embargoed B 80/100 0 1 2026-09-07
54 ProjectLiminality/DreamTalk/.mcp.json.template embargoed B 80/100 0 1 2026-09-07
55 TimothyVang/verdict-dfir-beta/.mcp.json.sift embargoed B 80/100 0 0 2026-09-07
56 TimothyVang/verdict-dfir/.mcp.json.sift embargoed B 80/100 0 0 2026-09-07
57 disler/agent-sandboxes/.mcp.json.sandbox embargoed B 80/100 0 1 2026-09-07
58 hashgraph-online/awesome-codex-plugins/plugins/Kanevry/session-orchestrator/.mcp.json embargoed B 80/100 0 1 2026-09-07
59 slysik/agent-sandboxes/.mcp.json.sandbox embargoed B 80/100 0 1 2026-09-07
60 AlexTo/wattle-lms embargoed C 78/100 0 1 2026-09-07
61 Vortiago/mcp-outline embargoed C 78/100 0 1 2026-09-07
62 awslabs/nx-plugin-for-aws embargoed C 78/100 0 1 2026-09-07
63 cklose2000/pinescript-mcp-server/.mcp.json.mac.example embargoed C 78/100 0 1 2026-09-07
64 crshdn/multi-agents-claude-codex/.mcp.json.firecrawl_7k.sample embargoed C 78/100 0 1 2026-09-07
65 disler/claude-code-hooks-multi-agent-observability/.mcp.json.firecrawl_7k.sample embargoed C 78/100 0 1 2026-09-07
66 jaydubya818/multi-agent-observability/.mcp.json.firecrawl_7k.sample embargoed C 78/100 0 1 2026-09-07
67 jmanhype/speckit/.mcp.json.linear-example embargoed C 78/100 0 1 2026-09-07
68 jnarowski/agentcmd/.mcp.json.shadcn embargoed C 78/100 0 1 2026-09-07
69 lucasgerads/spicelib-mcp/.mcp.json.template embargoed C 78/100 0 1 2026-09-07
70 phivh/claudekit/.mcp.json.firecrawl_7k.sample embargoed C 78/100 0 1 2026-09-07
71 qut-dmrc/buttermilk/.mcp.json.disabled embargoed C 78/100 0 1 2026-09-07
72 tigerowo/infinite-canvas/canvas-agent/.mcp.json embargoed C 78/100 0 1 2026-09-07
73 Consiliency/Code-Index-MCP/.mcp.json.backup embargoed C 75/100 0 2 2026-09-07
74 everruns/everruns/plugins/everruns-dev/.mcp.json embargoed C 75/100 1 0 2026-09-07
75 floodsung/gongzhonghao_agent_team/investment_insights/.mcp.json embargoed C 75/100 0 1 2026-09-07
76 jnarowski/agentcmd/.mcp.json.context7 embargoed C 75/100 1 0 2026-09-07
77 jnarowski/agentcmd/.mcp.json.figma embargoed C 75/100 1 0 2026-09-07
78 dyCuong03/unity-agent-team/.mcp.json.template embargoed C 73/100 0 1 2026-09-07
79 Consiliency/Code-Index-MCP/.mcp.json.docker embargoed C 70/100 0 2 2026-09-07
80 Consiliency/Code-Index-MCP/.mcp.json.template embargoed C 70/100 1 0 2026-09-07
81 FriendsOfShopware/shopmon embargoed D 68/100 0 1 2026-09-07
82 disler/agentic-drop-zones/.mcp.json.sample embargoed D 68/100 0 2 2026-09-07
83 petekp/claude-code-setup/templates/.mcp.json.template embargoed D 68/100 0 2 2026-09-07
84 slysik/agentic-drop-zones/.mcp.json.sample embargoed D 68/100 0 2 2026-09-07
85 gtkx-org/gtkx/packages/create-gtkx/src/templates/.mcp.json.ejs embargoed D 66/100 0 2 2026-09-07
86 jmbish04/core-remodel embargoed D 66/100 0 2 2026-09-07
87 AgentOrchestrator/AgentBase embargoed D 65/100 1 1 2026-09-07
88 Tattzy25/Digital-Hustle-Memory/.mcp.json.backup embargoed D 65/100 1 0 2026-09-07
89 alphaplapplap/mcp-memory-service/.mcp.json.backup embargoed D 65/100 1 0 2026-09-07
90 leboncoin/spark-web embargoed D 65/100 1 1 2026-09-07
91 lisophorm/mcp-memory-service/.mcp.json.backup embargoed D 65/100 1 0 2026-09-07
92 Snehal1112/rocketvault embargoed D 61/100 0 2 2026-09-07
93 AIFundTeam/genai-starter/.mcp.json.template embargoed D 60/100 1 1 2026-09-07
94 Nickalus12/Loom/claude/.mcp.json embargoed D 60/100 0 2 2026-09-07
95 Archive228/loopkit embargoed F 56/100 0 2 2026-09-07
96 jnarowski/agentcmd/.mcp.json.design embargoed F 53/100 1 1 2026-09-07
97 disler/agent-sandboxes/apps/sandbox_agent_working_dir/.mcp.json.sandbox embargoed F 48/100 0 3 2026-09-07
98 ivanzzeth/remote-signer/.mcp.json.example embargoed F 48/100 0 4 2026-09-07
99 slysik/agent-sandboxes/apps/sandbox_agent_working_dir/.mcp.json.sandbox embargoed F 48/100 0 3 2026-09-07
100 AmadeusITGroup/otter/tools/llm/plugins/otter/.mcp.json embargoed F 46/100 0 2 2026-09-07
101 BlessedRebuS/Krawl/src/templates/deception/.mcp.json.html embargoed F 46/100 0 3 2026-09-07
102 BlessedRebuS/Krawl/src/templates/deception/@fs__app__.mcp.json.html embargoed F 46/100 0 3 2026-09-07
103 BlessedRebuS/Krawl/src/templates/deception/@fs__root__.mcp.json.html embargoed F 46/100 0 3 2026-09-07
104 ahostbr/kuroryuu-public/.mcp.json.template embargoed F 45/100 1 2 2026-09-07
105 YoshiiRyo1/document-templates-for-aws embargoed F 44/100 0 3 2026-09-07
106 SiThuTun-mdy/fast-order embargoed F 40/100 2 0 2026-09-07
107 getsentry/sentry-mcp embargoed F 40/100 2 1 2026-09-07
108 Abilityai/agent-cornelius/.mcp.json.template embargoed F 34/100 0 3 2026-09-07
109 coalesce-labs/catalyst/.mcp.json.template embargoed F 34/100 0 3 2026-09-07
110 tpierrain/kenjaku/.mcp.json.template embargoed F 32/100 0 4 2026-09-07
111 nft-maker-one/claude_course/day7_mcp/.mcp.json.bak embargoed F 26/100 1 3 2026-09-07
112 nuxt/nuxt.com embargoed F 25/100 3 0 2026-09-07
113 zhcndoc/nuxt embargoed F 25/100 3 0 2026-09-07
114 miantiao-me/bm.md embargoed F 24/100 1 2 2026-09-07
115 quazardous/nelson-mcp/.mcp.json-dist embargoed F 20/100 2 2 2026-09-07
116 Abilityai/cornelius/.mcp.json.template embargoed F 16/100 1 3 2026-09-07
117 Zenobia000/ai-brainstorming/.mcp.json.windows.example embargoed F 10/100 0 3 2026-09-07
118 Zenobia000/auto-triz-x1c01/.mcp.json.windows.example embargoed F 10/100 0 3 2026-09-07
119 Zenobia000/claude-Godzilla-z/.mcp.json.windows.example embargoed F 10/100 0 3 2026-09-07
120 Abilityai/agent-ruby/.mcp.json.template embargoed F 0/100 0 13 2026-09-07
121 AndrewAltimit/template-repo/.mcp.json.full embargoed F 0/100 8 5 2026-09-07
122 DNYoussef/context-cascade/.mcp.json.archived embargoed F 0/100 0 9 2026-09-07
123 DNYoussef/context-cascade/.mcp.json.template embargoed F 0/100 2 3 2026-09-07
124 TheWayWithin/agent-11/.mcp.json.template embargoed F 0/100 0 11 2026-09-07
125 TheWayWithin/aimpactscanner-mvp/.mcp.json.template embargoed F 0/100 0 11 2026-09-07
126 TheWayWithin/aisearchmastery/.mcp.json.template embargoed F 0/100 0 11 2026-09-07
127 TheWayWithin/evolve-7/.mcp.json.template embargoed F 0/100 0 11 2026-09-07
128 TheWayWithin/freecalchub/.mcp.json.template embargoed F 0/100 0 11 2026-09-07
129 Zenobia000/ai-brainstorming/.mcp.json.linux.example embargoed F 0/100 0 7 2026-09-07
130 Zenobia000/auto-triz-x1c01/.mcp.json.linux.example embargoed F 0/100 0 7 2026-09-07
131 Zenobia000/claude-Godzilla-z/.mcp.json.linux.example embargoed F 0/100 0 7 2026-09-07
132 aegntic/DAILYDOCO/.mcp.json.backup.scattered.20250605_024038 embargoed F 0/100 0 24 2026-09-07
133 assafkip/huntkit/.mcp.json.template embargoed F 0/100 1 5 2026-09-07
134 gavinmcfall/home-ops/.mcp.json.disabled embargoed F 0/100 1 4 2026-09-07
135 ilandahan/AID/.mcp.json.mac embargoed F 0/100 0 10 2026-09-07
136 ilandahan/AID/.mcp.json.windows embargoed F 0/100 0 4 2026-09-07
137 indranilbanerjee/socialforge/.mcp.json.connectors-reference embargoed F 0/100 10 0 2026-09-07
138 iterate/iterate embargoed F 0/100 5 0 2026-09-07
139 jpiece3/lead-magnet-quiz-workflow/.claude/.mcp.json.template embargoed F 0/100 0 9 2026-09-07
140 namastexlabs/automagik-tools/.mcp.json.backup embargoed F 0/100 23 23 2026-09-07
141 nilhemdot/bountystrike-community/.mcp.json.bak-20260528-234151 embargoed F 0/100 0 1 2026-09-07
142 perchfuruncle656/huntkit/.mcp.json.template embargoed F 0/100 1 5 2026-09-07
143 plurigrid/asi/ies/music-topos/.mcp.json.bak embargoed F 0/100 0 4 2026-09-07
144 tbuczen/LARPilot/.mcp.json.dist embargoed F 0/100 1 11 2026-09-07
145 thejackluo/weaive/docs/setup/mcp-configs/.mcp.json.windows embargoed F 0/100 0 8 2026-09-07

Data: index.json (weekly). Prior snapshots: history.json. Index code: benchmarks/.