tryb

Evidence-first beta

MCP Security Observatory

The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.

Security Index

Pending

0 comparable scans

Monitored

0

Public server identities

High risk

0

Latest completed scan

Open findings

0

Public, non-embargoed

Disclosures

0

Responsible disclosure records

30229 canonical servers

Page 159 of 1512

docrag-mcp

Enables Claude to query a local, persistent RAG index over markdown folder trees, exposing the same index used by the docrag CLI for on-device, network-free search and retrieval of document chunks via Ollama embeddings.

vunversioned · static queued · execution queued

Unscanned

Draw.io MCP Server

Enables LLMs to create and open diagrams in the draw.io editor, supporting inline chat previews via MCP Apps, direct editor opening with XML/CSV/Mermaid format support, and diagram export to PNG/SVG/PDF or browser URLs through multiple integration approaches.

vunversioned · static queued · execution queued

Unscanned

educator-toolkit-mcp

An MCP toolkit exposing six AI-powered educator-craft tools for reviewing, critiquing, and improving learning artifacts like lessons, curricula, AI tools, learner experiences, assessments, and content accuracy. Deployable via hosted HTTPS, local stdio MCP, or an importable Python kernel.

vunversioned · static queued · execution queued

Unscanned

efood-mcp

An unofficial Model Context Protocol server for the efood.gr consumer app API that lets you discover restaurants, browse menus, build a cart, and place real orders on efood.gr.

vunversioned · static queued · execution queued

Unscanned

EvidenceBound DataHub Gate

This MCP server provides fail-closed governance for DataHub data agents by implementing a Read Context → Restricted AST Gate → Tamper-Evident Proof Pack → Native DataHub Write-Back loop. It verifies dataset identity, schema, and lineage evidence against candidate contracts, binds claims to evidence, and appends VERIFIED or BLOCKED receipts back to DataHub through the official native update_description MCP mutation.

vunversioned · static queued · execution queued

Unscanned

evident

An agent-agnostic web extraction and fetch layer that turns URLs into verified, typed data with confidence scores via MCP, REST, or SDK, orchestrating scraping engines behind a resilience ladder and supporting structured extraction against any schema.

vunversioned · static queued · execution queued

Unscanned

EZAuto MCP Learning Server

MCP server for AI-powered roadside assistance case management, exposing SQLite-backed tools for querying case counts, statuses, and summaries through natural language via Gemini function calling.

vunversioned · static queued · execution queued

Unscanned

facebook-lyr

A Facebook/Messenger MCP server that lets AI agents read and engage with profiles, pages, posts, comments, groups, Messenger conversations, notifications, and events using the user's existing browser session cookies — no Graph API app, tokens, or browser automation required. It supports multi-account and Page switching, write operations (posting, commenting, messaging) with per-identity limits and cooldowns, and honest error reporting where Meta has decommissioned cookie-era endpoints.

vunversioned · static queued · execution queued

Unscanned

foldcase-mcp

Foldcase MCP server exposes three read-only tools over stdio that serve a coding agent the full catalog of Foldkit component Showcases — enumerating components and their states, describing Message payload schemas as JSON Schema documents, and documenting Model schemas — all derived from a single Showcase definition.

vunversioned · static queued · execution queued

Unscanned

Forge Workspace MCP Server

A deliberately narrow, approval-gated workspace server that safely reads and writes files and runs allowlisted commands only inside one configured workspace, requiring visible approval for every write, process execution, and file read, with stale-overwrite protection and symlink-escape rejection.

vunversioned · static queued · execution queued

Unscanned

GenRocket MCP

GenRocket MCP server that exposes GenRocket as tools for AI chat (GitHub Copilot), enabling natural-language interaction to test connections, list projects/scenarios/chains/domains/generators, download .grs scenarios, and run the GenRocket Runtime to generate data.

vunversioned · static queued · execution queued

Unscanned

ghcli-mcp-connector

ghcli-mcp-connector is an MCP server that lets agents run any GitHub CLI (gh) command—repos, issues, PRs, releases, workflows, gists, and more—as a single static Go binary with a read-only-by-default safety gate on state-changing operations.

vunversioned · static queued · execution queued

Unscanned

github-stars-mcp

An MCP server that caches your GitHub starred repositories in a local SQLite database and lets you search, list, and retrieve details about them through any MCP client (Claude Desktop, Cursor, VS Code, etc.), with automatic freshness checks via GitHub's ETag mechanism.

vunversioned · static queued · execution queued

Unscanned

gmail-mcp-server

A secure Gmail MCP server that lets Claude search, read, and triage mail, draft replies, and send drafts—with encrypted credential storage, scoped OAuth permissions, and explicit human checkpoints before any irreversible action.

vunversioned · static queued · execution queued

Unscanned

GoHighLevel MCP Starter

MCP server that lets you talk to your GoHighLevel sub-account in plain English, offering six tools to search contacts, list calendars, check free slots, and book appointments with dry-run safety and explicit error messages.

vunversioned · static queued · execution queued

Unscanned

ha-exception-debug

A live post-mortem debugger MCP server for Home Assistant that lets AI agents list captured exceptions, walk traceback frames, read local variables, and optionally evaluate Python in the context of a captured frame for true post-mortem debugging.

vunversioned · static queued · execution queued

Unscanned

HTML Slide Studio

HTML Slide Studio MCP server enables agents to create, read, update, validate, and export Marp Markdown presentation decks, including asset management and secure offline HTML export with path traversal and symlink protections.

vunversioned · static queued · execution queued

Unscanned

Hubitat MCP Server

MCP server for Hubitat Elevation hubs that controls devices via the Maker API, with optional gated access to undocumented admin routes, supporting device listing, command sending, virtual device and hub variable automation for Rule Machine, and hub management features.

vunversioned · static queued · execution queued

Unscanned

humanized-browser

This MCP server enables natural, humanized control of a real Chrome browser from Cursor agents, simulating natural mouse paths, typing cadence, and scroll pauses for click, type, scroll, and navigate actions via a Chrome extension.

vunversioned · static queued · execution queued

Unscanned

ja-local-kb

A local knowledge base MCP server that enables retrieval and evidence-based Q&A over Obsidian Markdown notes, with high-recall embedding search, chunked indexing, hybrid retrieval, and three STDIO MCP tools for agent-driven recollection and quality-gated recall.

vunversioned · static queued · execution queued

Unscanned

Catalog coverage

Every version record returned by the last completed official Registry cursor sweep.

Static coverage

Metadata and artifact checks completed for the current content-bound revision.

Execution coverage

Sandbox behavior checks; unavailable until a conforming external worker completes them.