MCP servers that fail: no over-broad / destructive tools
2,858 of the 36,026 Model Context Protocol servers where this control could be evaluated fail it — that is 8% of the evaluated corpus on the Canopii Trust Index.
- Servers failing
- 2,858
- Failure rate
- 8%
- Average score when failing
- 61/100
Why this matters
Tools exposing arbitrary shell or bulk-delete grant outsized blast radius.
How to pass it
Scope tools narrowly; avoid arbitrary command execution and destructive defaults.
Control id tool.no_destructive_scope — a guard control, so a confirmed failure caps the server's score at the medium ceiling no matter what else passes.
Affected servers
Each server's own page shows the evidence behind this result.
Operate one Evolution API (WhatsApp) instance: chats, history, sending, groups, settings.
MCP server giving AI agents eyes and hands inside Android devices via ADB
Operate local-ydb deployments through local or SSH-backed MCP tools.
Generate Multisim circuits, run simulations, export data, and create experiment reports.
Self-hosted AI gateway that governs MCP servers, LLM traffic, and A2A agents behind one endpoint
Manage Cosmic CMS content, media, object types, and AI generation from any MCP client.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.
Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.
Self-hosted technical SEO audit MCP. 50+ checks, WAF detection, ephemeral. Built on LibreCrawl.
MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.
Inspect, verify, diff, and scaffold a pracht app's routes, API, and capabilities from its app graph.
Unified MCP & Skill management gateway, shared across AI agents, 99% context token savings
Sitewalk: Technical SEO Site Audit. Open-source technical SEO crawler and MCP server for Claude, Cursor and Codex. 50+ checks, PDF and CSV reports, self-hosted. Built on LibreCrawl. MIT.
TCP-enhanced fork of Cheat Engine MCP Bridge. Connect Cursor, Copilot and Claude AI directly to local or remote Cheat Engine via TCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.
Structured Docker operations (ps, images, logs, build) as typed JSON.
MCP server bridging Claude Code to the OpenClaw gateway management plane via JSON-RPC.
MCP server for ChipsNews — manage news sources, articles, and triggers
Build job feeds from careers pages; query enriched jobs and hiring stats. Needs a YubHub API key
Mobile QA on local Android Emulators and iOS Simulators: autopilot tests, evidence, reports.
MCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review
MCP relay server for Claude Desktop <-> Claude Code communication
A Model Context Protocol server for use with Tauri v2 applications
Reads a boat's Signal K data and helps an AI assistant design and install KIP dashboards.
45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.
Lets AI agents drive a real terminal: type, press keys, click, read the screen, take screenshots.
Generate Sass palettes, typography, elevations, and themes for Ignite UI components.
MCP server for database connectivity. Multi-DB (PostgreSQL, MySQL, SQLite), 19 tools.
Observe & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.
Causal root-cause analysis MCP server -- 56 tools across graphs, RCA models, PyRCA.
Control macOS settings, apps, windows, audio, Music, displays, screenshots, and Focus mode via MCP.
MCP server for Appium mobile automation on iOS and Android devices with test creation tools.
A Model Context Protocol server for use with Tauri v2 applications
MCP server for Zabbix monitoring and automation
Markdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database.
Self-hosted AI Agents Platform supporting Claude Code, Codex, Gemini agents. Apache 2.0.
Developer tools for files, git, ports, processes and more, the same on Windows, Linux and macOS
MCP server for executing shell commands on remote hosts via SSH.
Your clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.
Debug microcontrollers via OpenOCD: flash, breakpoints, memory, registers and variables.
Safe-write Postgres MCP server with preview-before-execute writes and rollback safety.
MCP server for Obsidian vaults - AI tools with consistent canonical context. Local-first.
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
iOS leak/perf debugging via MCP: memgraph cycles, .trace analysis, SourceKit-LSP bridging.
MCP server for persistent, searchable memory for AI agents.
Autonomous MCP agent for grad school applications: prof discovery, cold emails, SOP, tracking.
Free Google Search Console MCP: your real GSC, Google Analytics and keyword data for AI agents.
Connect AI assistants to your Vaiz workspace: tasks, projects, boards, documents and milestones.
MCP server and CLI for Android development and change-aware Android and Flutter testing workflows.
Screen-reader navigation cost analyzer. Scores AT user effort to find, reach, and operate content.
Pre-execution governance for AI agents. Validates tool calls before they execute.
Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.
Android MCP server for AI-assisted development. Build, test, emulate, and automate.
Read-only Human Standards guidance for accessible, usable interface design.
MCP Server for Optics Design System documentation and token usage.
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
Deploy and manage Bult apps from AI coding agents.
Castor for Confluence Data Center — MCP server bridging Confluence DC with AI agents
Free Google Search Console MCP: your real GSC, Google Analytics and keyword data for AI agents.
Verify x402 payment endpoints before an AI agent pays: scam scan, on-chain checks, trust scores.
MTG card prices, deck analysis, and investment intelligence — 19 tools over the Mythic Index API.
MCP server exposing 100+ IT tools and utilities for developers and system administrators.
Memory database for LLM agents — persistent semantic + keyword memory, project namespacing, served o
Control a Mineflayer Minecraft bot with 120+ MCP tools: move, mine, craft, fight, build, and see.
Local-first nutrition MCP for AI agents: food, barcode, photo, intake, hydration, goals.
Build, deploy, drive and debug Android apps: Gradle, emulators, adb, logcat, UI automation
MCP server for Google Play: full Android Publisher API v3 and Play Developer Reporting API.
AI agent dating — personality matching, compatibility scoring, and real conversations on inbed.ai
260 MCP tools across 49 domains. AI Flywheel, quality gates, research, web scraping.
Record a browser flow once with a model, then compile it to a Playwright spec that needs no model.
Manage TrueTick Minecraft servers from AI: start/stop, live TPS, console, files, backups, mods.
Build, version, review, and export websites, web apps, and games from a conversation.
Deploy durable AI agents with Omnara, an open-source managed-agent platform.
Dynamically expose tools from proxied servers based on an Agent Persona
Build Elementor sites with AI agents - native, editable pages via ~90 MCP tools. Free & MIT.
MCP server for Chrome DevTools
No-KYC VPS + per-second code sandboxes AI agents run over MCP — 75 tools, SDK, pay BTC/XMR/USDC/USDT
Inspect and query MySQL 5.0–5.6; opt-in INSERT/UPDATE/DELETE/DDL. Live-verified 5.0–8.0.
Coolify 4.1.x MCP server — deploy, diagnose, and manage apps, services, and databases
Create, edit, design and export Apple Numbers, Keynote and Pages files. Verified and Arabic-safe.
AI-powered mobile device automation for Android and iOS devices, emulators, and simulators
Query Umami Analytics v3 — stats, funnels, retention, attribution, UTM. Read-only by default.
Runtime CSS probe — inspect layout, overflow, scroll chains in a real browser. For AI agents.
Crypto MCP: 105 tools across news, market, on-chain, sentiment, indicators, agent generation.
Detect developer stress, focus, fatigue from typing. Block dangerous commands when tired.
MCP server for Arista EOS device operations via eAPI
Fully local memory for AI agents: zero-LLM ingest, semantic recall, air-gapped, auditable.
MCP tools for CRUMB artifacts and Logisim-evolution analysis and non-interactive simulation.
Dynamic context loading for AI assistants with TDD workflow and AST analysis
Persistent memory MCP server for Claude Code, Cursor, and GitHub Copilot.
Full-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.
Persistent, shared memory for AI agents — facts, checkpoints, semantic search.
MCP server for the Krónan grocery store API (Iceland)
50 tools to manage Rundeck jobs, executions, projects, nodes, and system via MCP
Ask an AI about your Minecraft server and let it run it: players, worlds, configs, logs.
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
Official Porkbun MCP server: domains, DNS, SSL, hosting and Cloudflare via the Porkbun API.
This control is one of 32 in the published rubric — see how scoring works or how the ecosystem fails every other control.