tryb

Evidence-first beta

MCP Security Observatory

The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.

Security Index

Pending

0 comparable scans

Monitored

0

Public server identities

High risk

0

Latest completed scan

Open findings

0

Public, non-embargoed

Disclosures

0

Responsible disclosure records

30229 canonical servers

Page 170 of 1512

opencode-mcp-bridge

A local MCP server that delegates coding tasks to a temporary OpenCode session and returns a completion report with changed files, tool calls, cost, and the subagent's reply.

vunversioned · static queued · execution queued

Unscanned

outlook-web-mcp-server

Enables interaction with Outlook Web through its internal API, supporting email search, folder listing, email retrieval, read state changes, calendar events, and reply drafts without Microsoft Graph or COM.

vunversioned · static queued · execution queued

Unscanned

Parseable MCP Server

Model Context Protocol server for Parseable that lets MCP-capable clients discover, query, and manage Parseable datasets and alerts using natural language. Supports both stdio and HTTP transports.

vunversioned · static queued · execution queued

Unscanned

pkg-oracle

An MCP server that verifies npm and PyPI packages before installation, checking for existence, known vulnerabilities, OpenSSF scorecard, and typosquatting, returning an ALLOW/WARN/BLOCK verdict.

vunversioned · static queued · execution queued

Unscanned

Prescription Review MCP Server

Enables MCP-integrated prescription review with incomplete laboratory evidence, using deterministic rules and language-model guardrails to enforce approval authority boundaries.

vunversioned · static queued · execution queued

Unscanned

qoder-browser-bridge

A standalone MCP server that lets Claude Code, opencode, and other MCP clients control your real browser via the QoderWork browser connector extension, preserving login state and providing tools for navigation, clicking, typing, screenshots, and more.

vunversioned · static queued · execution queued

Unscanned

qr-cow MCP server

MCP server that exposes the qr-cow.com API, enabling AI clients to create, style, manage, and analyze QR codes through natural language.

vunversioned · static queued · execution queued

Unscanned

remotessh-mcp

Provides local command execution, remote SSH, interactive terminals, file read/write, and source search for AI CLI through stdio, with large output pagination and safety confirmations.

vunversioned · static queued · execution queued

Unscanned

research-mcp

MCP server that searches 9 sources, scrapes full content, reranks results, and synthesizes cited answers with free LLMs.

vunversioned · static queued · execution queued

Unscanned

resume-mcp

MCP server that exposes a resume as callable tools and resources, enabling AI agents to query experience, skills, projects, and contact information via natural language.

vunversioned · static queued · execution queued

Unscanned

ripar-skills

This MCP server enables AI agents to interact with Ripar's decentralized registries on Algorand, offering tools for searching agents, checking reputations, listing jobs, auditing settlements, and composing unsigned transactions for payments.

vunversioned · static queued · execution queued

Unscanned

sber-mcp

Unofficial MCP server for SberBank Online, enabling agents to read banking products and operations and perform transfers between own accounts directly via HTTP, with human confirmation for transfers. Also provides an async SDK and CLI for use without an agent.

vunversioned · static queued · execution queued

Unscanned

Sentinela MCP

Provides coding agents with durable, cross-session lessons-learned memory, enforcing that success or failure verdicts can only come from human approval, human correction, or objective metrics—never from the agent itself.

vunversioned · static queued · execution queued

Unscanned

seosiri-ops-comm-mcp

MCP server for enterprise operations, enabling Sentry error triage, Linear issue sync, and Slack incident response with tools for parsing stacktraces, dispatching alerts, and generating postmortems.

vunversioned · static queued · execution queued

Unscanned

simple-data-comparator-mcp

MCP server for comparing JSON, XML, XLSX, CSV, and text data using expected templates, returning pass/fail with difference details.

vunversioned · static queued · execution queued

Unscanned

sodabar

An MCP server that puts open data on tap, enabling LLM clients to search, inspect, and query 30,000+ civic datasets from Socrata portals with built-in guardrails like row caps and actionable error messages.

vunversioned · static queued · execution queued

Unscanned

SQMCPaL

An MCP server that enables MCP-compatible AI tools to read-only query Azure Database for PostgreSQL Flexible Server using your existing Azure CLI login, with auto-discovery, schema inspection, and arbitrary read-only SQL. No passwords or connection strings are stored; authentication uses short-lived Entra tokens.

vunversioned · static queued · execution queued

Unscanned

StackScan MCP Server

Enables natural language queries about the technologies behind websites and the companies running them, using the StackScan Tech Lookup API. Includes tools for domain technology lookup, company details, technology usage stats, and batch company lookups.

vunversioned · static queued · execution queued

Unscanned

tereno-mcp

MCP server for verifying blockchain safety on Base via x402, with free pricing/receipt tools and paid per-call guard, contract, and metadata checks settled in USDC.

vunversioned · static queued · execution queued

Unscanned

terminal-mcp

Secure MCP server for controlled terminal access, enabling AI assistants to run whitelisted commands with configurable working directory, timeout, and output limits.

vunversioned · static queued · execution queued

Unscanned

Catalog coverage

Every version record returned by the last completed official Registry cursor sweep.

Static coverage

Metadata and artifact checks completed for the current content-bound revision.

Execution coverage

Sandbox behavior checks; unavailable until a conforming external worker completes them.