Evidence-first beta
MCP Security Observatory
The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.
Security Index
Pending
0 comparable scans
Monitored
0
Public server identities
High risk
0
Latest completed scan
Open findings
0
Public, non-embargoed
Disclosures
0
Responsible disclosure records
30229 canonical servers
Page 165 of 1512
openproject-mcp-and-skills
MCP server enabling AI agents to interact with OpenProject API v3 for project management, including creating and managing work packages, projects, comments, time entries, boards, and user dashboards.
vunversioned · static queued · execution queued
outline-wiki-mcp
MCP server that turns a self-hosted Outline wiki into an AI team's knowledge base, providing tools for search, read, write, and organization with per-user permissions via client-supplied API tokens.
vunversioned · static queued · execution queued
Payment Reconciliation Copilot
Enables read-only investigation of payment transactions by building normalized timelines, detecting anomalies like duplicate charges and stuck refunds, and creating diagnostic escalations for human review. Never executes or modifies payment actions.
vunversioned · static queued · execution queued
QCH-Hermes
Self-hosted Gmail gateway MCP server that enables searching and fetching emails from multiple authorized Gmail mailboxes via a single backend authorization boundary.
vunversioned · static queued · execution queued
qencode-mcp
Qencode MCP server that connects AI clients to the Qencode Transcoding API via OAuth, allowing agents to submit, monitor, and reason about video transcoding jobs, including HLS ABR ladders, MP4 encoding, thumbnails, subtitles, transcriptions, and DRM packaging, plus Qencode Media Storage bucket and object management.
vunversioned · static queued · execution queued
RAG MCP Server with Streamable HTTP
Enables hybrid search (BM25 + semantic with RRF) over documentation, with Thai language support. It exposes MCP tools for adding documents and searching via Qdrant and Ollama/OpenAI, using a stateless Streamable HTTP transport.
vunversioned · static queued · execution queued
ReleaseGuard MCP Server
Provides MCP tools for scanning, redacting, and packaging dataset/model directories for public release, leveraging Presidio for PII detection and generating Hugging Face cards and EU AI Act training-data summaries.
vunversioned · static queued · execution queued
Restaurant MCP Server
MCP server exposing restaurant tools including search by cuisine, price, rating, and open status, restaurant details, user preferences stored in Neon Postgres, and RAG knowledge search covering 50 mock restaurants across Scottsdale and Phoenix.
vunversioned · static queued · execution queued
review-md
Enables reviewing Markdown files in a browser with inline annotations, submitting or cancelling reviews, and returning structured feedback through the review_markdown MCP tool.
vunversioned · static queued · execution queued
robins-i-mcp
An MCP server implementing the ROBINS-I V2 framework for risk-of-bias assessment in non-randomized studies, with deterministic algorithms and full provenance. It enables users to parse study documents, specify target trial results, answer signalling questions with evidence-bound quotes, and compute or override domain judgements.
vunversioned · static queued · execution queued
@rubyls/yearning-mcp
MCP server for Yearning SQL review platform, enabling read-only queries, ticket management (submit, audit, undo, rollback), query applications, comments, and data source/table exploration via REST/WebSocket APIs.
vunversioned · static queued · execution queued
SAP Sandbox MCP Server
Connects Claude to SAP's public S/4HANA Cloud sandbox via MCP, enabling natural-language queries against real SAP OData structures like sales and purchase orders.
vunversioned · static queued · execution queued
seosiri-semantic-entity-mcp
Provides tools for named entity extraction, Wikidata disambiguation, sameAs schema linking, and knowledge graph triple construction, enabling structured semantic data processing.
vunversioned · static queued · execution queued
seshat-bi
A read-only MCP server that reports BI pipeline readiness, blockers, and the next allowed action for governed Power BI workflows. It never writes files, executes warehouse work, or grants human approvals.
vunversioned · static queued · execution queued
set-agent-comm
Enables local agent-to-agent messaging between Claude Code sessions via file-based channels, with a registry, MCP tools and CLI for sending, reading, and tracking messages.
vunversioned · static queued · execution queued
SiliconFlow-Vision-MCP
An MCP server that provides 8 vision tools for UI screenshot to code, OCR, error diagnosis, diagram understanding, data visualization analysis, UI diff, and image/video analysis, plus model list query, powered by SiliconFlow's multimodal API.
vunversioned · static queued · execution queued
sinfo-mcp
MCP server that lets AI agents compose real music through a persistent server-side score, supporting planning, voice writing, verification, and MIDI export.
vunversioned · static queued · execution queued
skills-over-mcp-demo
Serves Agent Skills over MCP using the SEP-2640 Skills Extension, enabling skills discovery, retrieval, and resource reading via MCP.
vunversioned · static queued · execution queued
slimdex-mcp
Slimdex is a local MCP server that helps coding agents retrieve code narrowly—outlines, line ranges, symbol bodies, references, and intent-based searches—instead of reading whole files into context, featuring a persistent index and tools for exploration, editing, and session memory.
vunversioned · static queued · execution queued
Snowflake MCP Server
Enables Claude to interact with a Snowflake account through four tools: schema inspection, read-only queries, data/object execution (DML, DDL, COPY INTO, GRANT), and query log reads, with stdio transport and local macOS operation.
vunversioned · static queued · execution queued
Catalog coverage
Every version record returned by the last completed official Registry cursor sweep.
Static coverage
Metadata and artifact checks completed for the current content-bound revision.
Execution coverage
Sandbox behavior checks; unavailable until a conforming external worker completes them.