MCP servers that fail: no over-broad / destructive tools
1,721 of the 19,452 Model Context Protocol servers where this control could be evaluated fail it — that is 9% of the evaluated corpus on the Canopii Trust Index.
- Servers failing
- 1,721
- Failure rate
- 9%
- Average score when failing
- 60/100
Why this matters
Tools exposing arbitrary shell or bulk-delete grant outsized blast radius.
How to pass it
Scope tools narrowly; avoid arbitrary command execution and destructive defaults.
Control id tool.no_destructive_scope — a guard control, so a confirmed failure caps the server's score at the medium ceiling no matter what else passes.
Affected servers
Each server's own page shows the evidence behind this result.
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Self-hosted technical SEO audit MCP. 50+ checks, WAF detection, ephemeral. Built on LibreCrawl.
Self-hosted AI Agents Platform supporting Claude Code, Codex, Gemini agents. Apache 2.0.
MCP server giving AI agents eyes and hands inside Android devices via ADB
MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.
MCP server for Zabbix monitoring and automation
Manage Cosmic CMS content, media, object types, and AI generation from any MCP client.
Self-hosted AI gateway that governs MCP servers, LLM traffic, and A2A agents behind one endpoint
MCP relay server for Claude Desktop <-> Claude Code communication
Control macOS system settings, apps, windows, audio, displays, screenshots, and Focus mode via MCP.
TCP-enhanced fork of Cheat Engine MCP Bridge. Connect Cursor, Copilot and Claude AI directly to local or remote Cheat Engine via TCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
MCP server for ChipsNews — manage news sources, articles, and triggers
Debug microcontrollers via OpenOCD: flash, breakpoints, memory, registers and variables.
MCP server for SAP ABAP systems
MCP server for database connectivity. Multi-DB (PostgreSQL, MySQL, SQLite), 19 tools.
No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.
Dynamically expose tools from proxied servers based on an Agent Persona
Autonomous MCP agent for grad school applications: prof discovery, cold emails, SOP, tracking.
Safe-write Postgres MCP server with preview-before-execute writes and rollback safety.
A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.
Deploy and manage Bult apps from AI coding agents.
MCP tools for CRUMB artifacts and Logisim-evolution analysis and non-interactive simulation.
Full-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.
Query Umami Analytics v3 — stats, funnels, retention, attribution, UTM. Read-only by default.
Crypto MCP — 99 tools across news, market, on-chain, sentiment, indicators, agent generation.
AI agent discovery, marketplace, messaging, and payments on Nostr - no platform, no middleman
Coding agents build full-stack apps in persistent workspaces and share them by link.
A Model Context Protocol server for use with Tauri v2 applications
Build Elementor sites with AI agents - native, editable pages via ~90 MCP tools. Free & MIT.
Structured Docker operations (ps, images, logs, build) as typed JSON.
Connect AI assistants to your Vaiz workspace: tasks, projects, boards, documents and milestones.
Operate local-ydb deployments through local or SSH-backed MCP tools.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
Work a running OrcaSlicer with AI: slice, tune, and understand what each setting costs
Generate Sass palettes, typography, elevations, and themes for Ignite UI components.
iOS leak/perf debugging via MCP: memgraph cycles, .trace analysis, SourceKit-LSP bridging.
45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.
Android MCP server for AI-assisted development. Build, test, emulate, and automate.
No-KYC crypto VPS AI agents rent & run over MCP — 57 tools, pay USDC/USDT on Base/Eth/Polygon/Solana
MCP server for Arista EOS device operations via eAPI
MTG card prices, deck analysis, and investment intelligence — 19 tools over the Mythic Index API.
MCP server for Obsidian vaults - AI tools with consistent canonical context. Local-first.
Local-first nutrition MCP for AI agents: food, barcode, photo, intake, hydration, goals.
Crypto futures math: PnL, liquidation, position sizing, carry trade. 19 tools. Not AI estimates.
Your clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.
MCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review
Pre-execution governance for AI agents. Validates tool calls before they execute.
Unified MCP & Skill management gateway, shared across AI agents, 99% context token savings
UX toolkit: 28 knowledge resources, 23 analysis tools & 4 workflow prompts for any MCP client
Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.
MCP State Sidecar: durable state persistence for multi-agent AI workflows
Coolify 4.1.x MCP server — deploy, diagnose, and manage apps, services, and databases
MCP server for executing shell commands on remote hosts via SSH.
50 tools to manage Rundeck jobs, executions, projects, nodes, and system via MCP
Reads a boat's Signal K data and helps an AI assistant design and install KIP dashboards.
AI-powered music production and post-production in REAPER via MCP — 172 tools for composition, mixing, mastering, batch editing, audio QC, and ReaScript automation.
Memory database for LLM agents — persistent semantic + keyword memory, project namespacing, served o
Control a Mineflayer Minecraft bot with 120+ MCP tools: move, mine, craft, fight, build, and see.
Persistent memory MCP server for Claude Code, Cursor, and GitHub Copilot.
Markdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database.
A Model Context Protocol server for use with Tauri v2 applications
Secure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.
App Store Connect MCP Server for AI coding agents
Google Play Console MCP Server for AI coding agents
Persistent memory and session intelligence for AI coding assistants. Zero config.
MCP server for the Krónan grocery store API (Iceland)
MCP server for JavaScript reverse engineering and browser debugging.
Official MCP Server for Mailtrap
Build and manage policy-compliant AI agents with safety enforcement and compliance checking
Bounded KVP, RAG search, and wipe receipts for agent jobs over remote MCP
Control Android devices and emulators via ADB — screenshots, UI automation, and logcat.
Private AI context layer for semantic code search, dependency graphs, memory, and workspaces.
260 MCP tools across 49 domains. AI Flywheel, quality gates, research, web scraping.
Context OS for AI coding agents: task-scoped AST context, verified mutation, and rollback.
MCP configuration to connect AI agent to a Linux machine.
MCP server for Android device control via ADB and scrcpy
Causal root-cause analysis MCP server -- 56 tools across graphs, RCA models, PyRCA.
MCP server giving AI agents safe access to filesystem, databases, processes, and APIs.
AI-powered mobile device automation for Android and iOS devices, emulators, and simulators
HederaOracle - 12 Hedera tools: HCS, HTS tokens, mirror node, consensus, governance.
Local-first MCP server: version-correct library docs, code map, and offline drift for your repo.
Detect developer stress, focus, fatigue from typing. Block dangerous commands when tired.
MCP server for Dynadot domain registrar — domain search, registration, DNS, and transfers
MCP server for App Store Connect & Google Play Console — iOS/Android app management
AI agent dating — personality matching, compatibility scoring, and real conversations on inbed.ai
Database management — query, schema inspection, migrations for PostgreSQL, MySQL, SQLite.
Coordination bus + shared truth for AI agent fleets — self-hosted MCP server + stdio bridge.
Ontology-based MCP server that analyzes database schemas (PostgreSQL, Snowflake, ClickHouse, Dremio) and generates RDF/OWL ontologies with SQL mappings for fan-trap-free Text-to-SQL.
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 285 commands, 244 MCP tools, change-safety gates, audit evidence, zero API keys.
MCP server for MDMA — exposes spec, prompts, docs, and package metadata to AI assistants.
Manage TrueTick Minecraft servers from AI: start/stop, live TPS, console, files, backups, mods.
Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP
Dynamic context loading for AI assistants with TDD workflow and AST analysis
Manage adaptive cron jobs and HTTP endpoint scheduling via AI assistants.
Read-only Human Standards guidance for accessible, usable interface design.
MCP server exposing 100+ IT tools and utilities for developers and system administrators.
Drive your real, logged-in Chrome from any MCP client — even from a remote machine, no inbound port.
Autonomous QA MCP for web and macOS that tests like a real engineer, finds bugs, and verifies them.
Screen-reader navigation cost analyzer. Scores AT user effort to find, reach, and operate content.
Build, deploy, drive and debug Android apps: Gradle, emulators, adb, logcat, UI automation
This control is one of 29 in the published rubric — see how scoring works or how the ecosystem fails every other control.