Security scores for every MCP server.
Continuously scanned for tool poisoning, prompt injection, supply-chain, and credential risk. One score per version — before your agents connect.
Browse all 28,871 servers →The MCP ecosystem, scored
Every server independently scanned and scored for security — here's how the ecosystem looks so far.
Scan from your terminal
canopii is the open-source CLI behind the Trust Index — the same scoring engine, run locally against any GitHub repo, npm/PyPI package, or live MCP endpoint. Free, no account.
npx canopii scan --github <repo>Need API access?
Check any MCP server's security score from your own tools — CI gates, procurement review, agent allow-lists. Key-authenticated, rate-limited.
Top scored
Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.
An MCP (Model Context Protocol) server implementation for Microsoft Teams integration, providing capabilities to read messages, create messages, reply to messages, mention members.
Run and manage H Company's Computer-Use Agents from any MCP client.
Manage Coder workspaces, templates, and cloud development environments
AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints
Rust release tooling — drop-in GoReleaser parity + Rust extras.
Needs review
Agent runtime with typed memory, knowledge and code graphs, plus file and web tools
MCTS (Model Context Threat Scanner) is a local-first security scanner for MCP servers -- static and live tool discovery, multiple analyzers, auditable risk scores, and JSON, SARIF, and HTML output. For authors and platform teams; CI-ready, no cloud API.
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scanning, context budget, and backups.
MCP server for AI-driven console application automation and monitoring
Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.
A powerful toolkit for coding, providing semantic retrieval and editing capabilities.
Recently scanned
View all →MySQL change tracking with instant row-level recovery and forensic attribution for compliance.
AI-assisted COBOL → modern stack bridge. Parse COBOL programs, map to Python/Java/Go, generate t...
Query PostgreSQL databases in plain English — LLM-generated, safety-validated SQL.
Decodes React DevTools Profiler exports into render summaries and memoization advice for AI agents.
Agent-complete localization: extract strings, push keys, AI-translate, pull type-safe TS types.
NewsData.io MCP — wraps the NewsData.io global news API (newsdata.io)