MCP servers that fail: no over-broad / destructive tools
2,571 of the 22,078 Model Context Protocol servers where this control could be evaluated fail it — that is 12% of the evaluated corpus on the Canopii Trust Index.
- Servers failing
- 2,571
- Failure rate
- 12%
- Average score when failing
- 60/100
Why this matters
Tools exposing arbitrary shell or bulk-delete grant outsized blast radius.
How to pass it
Scope tools narrowly; avoid arbitrary command execution and destructive defaults.
Control id tool.no_destructive_scope — a guard control, so a confirmed failure caps the server's score at the medium ceiling no matter what else passes.
Affected servers
Each server's own page shows the evidence behind this result.
MCP server for Zabbix monitoring and automation
MCP server giving AI agents eyes and hands inside Android devices via ADB
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Self-hosted AI Agents Platform supporting Claude Code, Codex, Gemini agents. Apache 2.0.
Self-hosted technical SEO audit MCP. 50+ checks, WAF detection, ephemeral. Built on LibreCrawl.
MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.
Debug microcontrollers via OpenOCD: flash, breakpoints, memory, registers and variables.
Control macOS system settings, apps, windows, audio, displays, screenshots, and Focus mode via MCP.
TCP-enhanced fork of Cheat Engine MCP Bridge. Connect Cursor, Copilot and Claude AI directly to local or remote Cheat Engine via TCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
MCP server for ChipsNews — manage news sources, articles, and triggers
MCP relay server for Claude Desktop <-> Claude Code communication
Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.
Manage Cosmic CMS content, media, object types, and AI generation from any MCP client.
Self-hosted AI gateway that governs MCP servers, LLM traffic, and A2A agents behind one endpoint
MCP server for SAP ABAP systems
Coolify 4.1.x MCP server — deploy, diagnose, and manage apps, services, and databases
Local-first nutrition MCP for AI agents: food, barcode, photo, intake, hydration, goals.
MCP server for Arista EOS device operations via eAPI
45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.
Persistent memory MCP server for Claude Code, Cursor, and GitHub Copilot.
Full-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.
Control a Mineflayer Minecraft bot with 120+ MCP tools: move, mine, craft, fight, build, and see.
No-KYC crypto VPS AI agents rent & run over MCP — 57 tools, pay USDC/USDT on Base/Eth/Polygon/Solana
Deploy and manage Bult apps from AI coding agents.
MCP server for database connectivity. Multi-DB (PostgreSQL, MySQL, SQLite), 19 tools.
Safe-write Postgres MCP server with preview-before-execute writes and rollback safety.
Coding agents build full-stack apps in persistent workspaces and share them by link.
MCP State Sidecar: durable state persistence for multi-agent AI workflows
Crypto MCP — 99 tools across news, market, on-chain, sentiment, indicators, agent generation.
50 tools to manage Rundeck jobs, executions, projects, nodes, and system via MCP
Structured Docker operations (ps, images, logs, build) as typed JSON.
A Model Context Protocol server for use with Tauri v2 applications
Your clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.
Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.
UX toolkit: 28 knowledge resources, 23 analysis tools & 4 workflow prompts for any MCP client
Memory database for LLM agents — persistent semantic + keyword memory, project namespacing, served o
AI-powered music production and post-production in REAPER via MCP — 172 tools for composition, mixing, mastering, batch editing, audio QC, and ReaScript automation.
Build Elementor sites with AI agents - native, editable pages via ~90 MCP tools. Free & MIT.
Operate local-ydb deployments through local or SSH-backed MCP tools.
Connect AI assistants to your Vaiz workspace: tasks, projects, boards, documents and milestones.
MCP server for Obsidian vaults - AI tools with consistent canonical context. Local-first.
MCP server for executing shell commands on remote hosts via SSH.
Reads a boat's Signal K data and helps an AI assistant design and install KIP dashboards.
Markdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database.
Autonomous MCP agent for grad school applications: prof discovery, cold emails, SOP, tracking.
Generate Sass palettes, typography, elevations, and themes for Ignite UI components.
Dynamically expose tools from proxied servers based on an Agent Persona
Android MCP server for AI-assisted development. Build, test, emulate, and automate.
MCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review
MCP tools for CRUMB artifacts and Logisim-evolution analysis and non-interactive simulation.
Drive live iOS, Android, Apple TV and Android TV devices in the cloud to verify app changes.
Deploy, pay for and manage apps on Flux Cloud, the decentralized cloud. Prices in USD.
Query Umami Analytics v3 — stats, funnels, retention, attribution, UTM. Read-only by default.
A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.
Pre-execution governance for AI agents. Validates tool calls before they execute.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
MTG card prices, deck analysis, and investment intelligence — 19 tools over the Mythic Index API.
Observe & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.
Runtime CSS probe — inspect layout, overflow, scroll chains in a real browser. For AI agents.
iOS leak/perf debugging via MCP: memgraph cycles, .trace analysis, SourceKit-LSP bridging.
Unified MCP & Skill management gateway, shared across AI agents, 99% context token savings
Detect developer stress, focus, fatigue from typing. Block dangerous commands when tired.
Control Android devices and emulators via ADB — screenshots, UI automation, and logcat.
Castor for Confluence Data Center — MCP server bridging Confluence DC with AI agents
Streamkap CLI & MCP server - manage CDC pipelines, sources, destinations, and transforms
MCP server integration for DaVinci Resolve Studio
An MCP server that provides access to common Cisco Modeling Labs (CML) operations.
Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
Bounded KVP, RAG search, and wipe receipts for agent jobs over remote MCP
Drive your real, logged-in Chrome from any MCP client — even from a remote machine, no inbound port.
MCP for the Opendock Neutron API.
Autonomous QA MCP for web and macOS that tests like a real engineer, finds bugs, and verifies them.
An MCP server that provides a local, persistent, self-maintaining knowledge base for AI agents
MCP server for the Krónan grocery store API (Iceland)
MCP server for Dynadot domain registrar — domain search, registration, DNS, and transfers
Inspect and query MySQL 5.0–5.6; opt-in INSERT/UPDATE/DELETE/DDL. Live-verified 5.0–8.0.
Build, deploy, drive and debug Android apps: Gradle, emulators, adb, logcat, UI automation
Screen-reader navigation cost analyzer. Scores AT user effort to find, reach, and operate content.
Manage TrueTick Minecraft servers from AI: start/stop, live TPS, console, files, backups, mods.
MCP server for App Store Connect & Google Play Console — iOS/Android app management
Google Play Console MCP Server for AI coding agents
App Store Connect MCP Server for AI coding agents
Ontology-based MCP server that analyzes database schemas (PostgreSQL, Snowflake, ClickHouse, Dremio) and generates RDF/OWL ontologies with SQL mappings for fan-trap-free Text-to-SQL.
Dynamic context loading for AI assistants with TDD workflow and AST analysis
Database management — query, schema inspection, migrations for PostgreSQL, MySQL, SQLite.
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 285 commands, 244 MCP tools, change-safety gates, audit evidence, zero API keys.
Causal root-cause analysis MCP server -- 56 tools across graphs, RCA models, PyRCA.
Manage adaptive cron jobs and HTTP endpoint scheduling via AI assistants.
Bounded KVP, RAG search, and wipe receipts for agent jobs over remote MCP
Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP
Official MCP Server for Mailtrap
Context OS for AI coding agents: task-scoped AST context, verified mutation, and rollback.
Build and manage policy-compliant AI agents with safety enforcement and compliance checking
MCP server for JavaScript reverse engineering and browser debugging.
Secure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.
MCP server for Android device control via ADB and scrcpy
Persistent, shared memory for AI agents — facts, checkpoints, semantic search.
MCP Server for Optics Design System documentation and token usage.
Persistent semantic memory for SQL databases. Postgres, MySQL, MSSQL, SQLite.
AI agent dating — personality matching, compatibility scoring, and real conversations on inbed.ai
This control is one of 29 in the published rubric — see how scoring works or how the ecosystem fails every other control.