MCP Security Index

Weekly grade across 94 public MCP servers. Scanner: agent-audit-kit. Snapshot: 2026-04-18T12:15+00:00.

New vulnerabilities are reported privately first and surfaced here only after our 90-day disclosure policy window.

Week-over-week grade distribution

Not enough snapshots yet for a trend chart (need ≥2).

#ServerGradeScoreCriticalsHighsLast scanned
1 ChaseKolozsy/AnkiChat/.mcp.json.backup no-findings A 100/100 0 0 2026-04-18
2 atsentia/dinbutler/.mcp.json.sample no-findings A 100/100 0 0 2026-04-18
3 bobmatnyc/ai-power-rankings/.kuzu-memory-backups/.mcp.json.backup_20251027_001408 no-findings A 100/100 0 0 2026-04-18
4 disler/quick-data-mcp/quick-data-mcp/.mcp.json.sample no-findings A 100/100 0 0 2026-04-18
5 ellisapotheosis/Project-Nyra/docs/archive/backup-files/.mcp.json.backup-20260116-035516 no-findings A 100/100 0 0 2026-04-18
6 jharter1/hashi_homelab/.mcp.json.bkp no-findings A 100/100 0 0 2026-04-18
7 johnhkchen/obsidian-knowledge-base/.mcp.json.template no-findings A 100/100 0 0 2026-04-18
8 lizTheDeveloper/superalignment-chatroom/.claude/agents/mcp-configs/full.mcp.json.mac-backup no-findings A 100/100 0 0 2026-04-18
9 quazardous/sailing/.mcp.json-dist no-findings A 100/100 0 0 2026-04-18
10 tofunori/Ragdoc no-findings A 100/100 0 0 2026-04-18
11 tonis2/blender-mcp no-findings A 100/100 0 0 2026-04-18
12 undergroundrap/UEFN-TOOLBELT/.mcp.json.template no-findings A 100/100 0 0 2026-04-18
13 wtyler2505/multi-controller-app/.mcp.json.backup-clearthought no-findings A 100/100 0 0 2026-04-18
14 JosiahSiegel/planview-mcp/.mcp.json.windows.example embargoed A 95/100 0 0 2026-04-18
15 bbfox0703/RoslynCSMCP/.mcp.json.sample embargoed A 95/100 0 0 2026-04-18
16 dg1an3/ALGT embargoed A 95/100 0 0 2026-04-18
17 jarmentor/codebase-contextifier-9000/.mcp.json.template embargoed A 95/100 0 0 2026-04-18
18 jyogi-web/Megaro_ChebuWarts/.claude/.mcp.json.mac embargoed A 95/100 0 0 2026-04-18
19 jyogi-web/Megaro_ChebuWarts/.claude/.mcp.json.windows embargoed A 95/100 0 0 2026-04-18
20 rfxlamia/centotype/.mcp.json.bak.1758902676 embargoed A 95/100 0 0 2026-04-18
21 yintzuyuan/glyphs-info-mcp/.mcp.json.template embargoed A 95/100 0 0 2026-04-18
22 Abilityai/trinity/.mcp.json.template embargoed A 90/100 0 0 2026-04-18
23 angkira/ninja-cli-mcp/.mcp.json.backup embargoed B 85/100 0 0 2026-04-18
24 bmorri13/dividend_tracker/frontend/.mcp.json-example embargoed B 85/100 0 1 2026-04-18
25 lizTheDeveloper/ai_village/.mcp.json.disabled embargoed B 85/100 0 1 2026-04-18
26 terrylica/trading-fitness/.mcp.json.disabled embargoed B 85/100 0 0 2026-04-18
27 torealden/RLC-Agent/.mcp.json.template embargoed B 85/100 0 1 2026-04-18
28 Ancient23/agent-base/.mcp.json.context7 embargoed B 83/100 0 1 2026-04-18
29 CoorpAcademy/claude-workshop/.mcp.json.mongodb embargoed B 83/100 0 1 2026-04-18
30 L3yserEpitech/Elite-Context-Engineering/.mcp.json.firecrawl_4k embargoed B 83/100 0 1 2026-04-18
31 MediMindAI/MedPlum_MediMind/.mcp.json.supabase-only embargoed B 83/100 0 1 2026-04-18
32 aaronsteers/privatebin-mcp/.mcp.json.template embargoed B 83/100 0 1 2026-04-18
33 dyoshikawa/smartphone-vibe-coding embargoed B 83/100 0 1 2026-04-18
34 harusame0616/crowdsourcing-scraping/.mcp.json.template embargoed B 83/100 0 1 2026-04-18
35 qut-dmrc/buttermilk/.mcp.json.disabled embargoed B 83/100 0 1 2026-04-18
36 scottbarstow/electron_photo_app/.mcp.json.template embargoed B 83/100 0 1 2026-04-18
37 Fredjr/VertaAI/.mcp.json.template embargoed B 80/100 1 0 2026-04-18
38 neo4j-partners/hands-on-lab-neo4j-and-microsoft/Lab 5 - Aura Agents/.mcp.json.template embargoed B 80/100 1 0 2026-04-18
39 Kblack0610/binks-agent-orchestrator/.mcp.json.bak embargoed C 78/100 0 1 2026-04-18
40 danielscholl-osdu/hostk8s/.mcp.json.cluster embargoed C 78/100 0 1 2026-04-18
41 ethrdev/cognitive-memory/.mcp.json.template embargoed C 75/100 1 0 2026-04-18
42 kourtni/dotfiles/.mcp.json.template embargoed C 75/100 0 0 2026-04-18
43 chattersorg/chatters/.mcp.json.bak embargoed C 73/100 0 2 2026-04-18
44 davidvojvodic/automation-site/.mcp.json.sample embargoed C 73/100 0 2 2026-04-18
45 disler/agentic-drop-zones/.mcp.json.sample embargoed C 73/100 0 2 2026-04-18
46 Morlock52/newmedia/.mcp.json.minimal embargoed C 71/100 0 2 2026-04-18
47 Morlock52/newmedia/.mcp.json.with-media embargoed C 71/100 0 2 2026-04-18
48 basalt-ai/cobalt/packages/cobalt/templates/.mcp.json.template embargoed C 71/100 0 2 2026-04-18
49 danmayer/coverband_rails_example/.mcp.json~ embargoed C 71/100 0 2 2026-04-18
50 bxxf/todo-mcp-assignment/.mcp.json.http.example embargoed C 70/100 1 1 2026-04-18
51 richardjlyon/americas_tapestry/.mcp.json.linux embargoed C 70/100 0 1 2026-04-18
52 richardjlyon/americas_tapestry/.mcp.json.macos embargoed C 70/100 0 1 2026-04-18
53 gregberns/agent-architect/.mcp.json-template embargoed D 68/100 0 2 2026-04-18
54 axiomantic/audiomancer/src/audiomancer/templates/project/.mcp.json.template embargoed D 66/100 0 2 2026-04-18
55 cyl19970726/Code3-Workspace/.mcp.json.tmp embargoed D 66/100 0 2 2026-04-18
56 nitrosolutions/10x-project embargoed D 66/100 0 2 2026-04-18
57 talent-factory/examcraft/.mcp.json.template embargoed D 66/100 0 2 2026-04-18
58 CONFENGE/etp-express/.mcp.json.backup embargoed D 65/100 0 0 2026-04-18
59 stallboy/claude-code-marketplace/.claude-plugin/.mcp.json.backup embargoed D 65/100 1 1 2026-04-18
60 danishi/arcadia/templates/.mcp.json.tmpl embargoed D 63/100 1 1 2026-04-18
61 msadig/muckrack-data-sourcer/.mcp.json.debug embargoed F 58/100 1 1 2026-04-18
62 TalkingMonkeyOz/claude-family/.mcp.json.template embargoed F 55/100 0 1 2026-04-18
63 yanisurbis/bin/.mcp.json.default embargoed F 51/100 1 2 2026-04-18
64 getsentry/spotlight embargoed F 50/100 2 1 2026-04-18
65 RIKU-GANEKO/demo_wave/.mcp.json.template embargoed F 44/100 0 4 2026-04-18
66 linus-mcmanamey/need_a_job/.mcp.json.template embargoed F 25/100 0 5 2026-04-18
67 Abilityai/agent-ruby/.claude/agents/.mcp.json.template embargoed F 23/100 0 6 2026-04-18
68 fbratten/From-Blueprint-to-Application/.mcp.json.backup.20260306_223841 embargoed F 15/100 0 1 2026-04-18
69 misasusma/claude-agentic-coding-template/.mcp.json.template embargoed F 14/100 0 6 2026-04-18
70 fbratten/From-Blueprint-to-Application/.mcp.json.backup.20260312_035531 embargoed F 10/100 0 1 2026-04-18
71 DNYoussef/context-cascade/.mcp.json.template embargoed F 4/100 2 3 2026-04-18
72 rousseau-romain/round-timing/.mcp.json.template embargoed F 3/100 0 6 2026-04-18
73 anyplatform/platform.workspace/files_to_deploy/all/.mcp.json.template embargoed F 1/100 1 5 2026-04-18
74 Abilityai/agent-ruby/.mcp.json.template embargoed F 0/100 0 13 2026-04-18
75 AndrewAltimit/Documentation/.mcp.json.full embargoed F 0/100 8 5 2026-04-18
76 Dexploarer/claudius-skills/intermediate-kit/.mcp.json.template embargoed F 0/100 0 10 2026-04-18
77 Kensan196948G/ITSM-System/config/mcp/.mcp.json.linux.example embargoed F 0/100 0 7 2026-04-18
78 Kensan196948G/IntegratedITAssetServiceManagement/.mcp.json.bak.20260307-101037 embargoed F 0/100 0 6 2026-04-18
79 MARE-DATUM/arcasadeveloping-bgapp/.mcp.json.backup.20250918_182703 embargoed F 0/100 3 18 2026-04-18
80 RussianRoulette84/agentic_project/.mcp.json.sample embargoed F 0/100 0 7 2026-04-18
81 TomahawkCM/modern-tco/config-backups/.mcp.json.backup.20250924_110733 embargoed F 0/100 0 8 2026-04-18
82 Xza85hrf/claude-code-agent-kit/.mcp.json.template embargoed F 0/100 2 7 2026-04-18
83 aegntic/ae-co-system/DAILYDOCO/.mcp.json.backup.scattered.20250605_024038 embargoed F 0/100 0 24 2026-04-18
84 agisota/.dotfiles/configs/claude/.mcp.json.backup.20260120-003442 embargoed F 0/100 0 7 2026-04-18
85 bennoloeffler/bassi/.mcp.json.ALL embargoed F 0/100 0 9 2026-04-18
86 diegofornalha/jira-ai-crewai-mcp/.mcp.json.template embargoed F 0/100 2 22 2026-04-18
87 djehring/phc-conference-2026/.mcp.json.template embargoed F 0/100 0 7 2026-04-18
88 golgoth31/sreportal/.mcp.json.template embargoed F 0/100 3 4 2026-04-18
89 harrysayers7/claudelife/.mcp.json.all-disabled embargoed F 0/100 3 51 2026-04-18
90 jasonkwak190/world-cup-platform/.claude/.mcp.json.template embargoed F 0/100 0 8 2026-04-18
91 lesleslie/opera-cloud-mcp/.mcp.json.backup embargoed F 0/100 4 4 2026-04-18
92 seungwonme/.claude/.mcp.json.backup embargoed F 0/100 1 30 2026-04-18
93 take566/mcp_server/.mcp.json.backup embargoed F 0/100 1 6 2026-04-18
94 tbuczen/LARPilot/.mcp.json.dist embargoed F 0/100 1 10 2026-04-18

Data: index.json (weekly). Prior snapshots: history.json. Index code: benchmarks/.