tryb

Evidence-first beta

MCP Security Observatory

The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.

Security Index

Pending

0 comparable scans

Monitored

0

Public server identities

High risk

0

Latest completed scan

Open findings

0

Public, non-embargoed

Disclosures

0

Responsible disclosure records

30229 canonical servers

Page 54 of 1512

Runware MCP

MCP server that gives AI agents access to Runware's full API for image, video, audio, 3D, upscaling, and other media generation and processing tasks via natural language.

vunversioned · static queued · execution queued

Unscanned

sentinel-recovery-services

Read-only MCP server that performs deterministic local preflights of agent-payment boundary documents and x402 v2 PaymentRequired JSON, and prepares unsubmitted public quote-request drafts without network calls or fund movement.

vunversioned · static queued · execution queued

Unscanned

simengine-mcp

Enables running Monte Carlo simulations, safety constraint evaluation, and optimization from JSON domain configs. Provides AI agents with a tool to simulate uncertain futures and obtain structured results.

vunversioned · static queued · execution queued

Unscanned

SION Taller Rust MCP Server

MCP server for the SION_TALLER_RUST workspace, enabling managed GitHub-to-Cargo workflows with governance, safety noops, and explicit approvals.

vunversioned · static queued · execution queued

Unscanned

smart-router

A single MCP server that fronts many downstream MCP servers and Skills, exposing only four tools (search, call_tool, use_skill, admin) so that an agent's context window only ever sees search results on demand.

vunversioned · static queued · execution queued

Unscanned

Soma

A batteries-included server runtime for provider-backed agents, offering MCP, CLI, REST, and plugin support.

vunversioned · static queued · execution queued

Unscanned

synapse-rmcp

MCP server and CLI for host and container operations, enabling Docker and Compose control, SSH, host inspection, logs, ZFS, and safe file transfer. It exposes flux and scout MCP tools with parity from the original TypeScript server.

vunversioned · static queued · execution queued

Unscanned

tailscale-rmcp

MCP server and CLI for Tailscale that lets agents inspect and manage tailnet devices, routes, users, keys, DNS, and ACL policy over stdio or streamable HTTP.

vunversioned · static queued · execution queued

Unscanned

tar-engine

Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.

vunversioned · static queued · execution queued

Unscanned

Tarotoo Tarot MCP Server

Enables AI assistants to look up tarot card meanings, search cards by keyword, draw random cards, and get yes/no answers for all 78 Rider-Waite-Smith cards with upright and reversed interpretations.

vunversioned · static queued · execution queued

Unscanned

telegram-agent-mcp

MCP server that exposes a Telegram bot over stdio transport, enabling LLM agents to discover each other, announce capabilities, and communicate via messages in shared group chats. It provides tools like whoami, announce, list_agents, ping_agent, send_message, list_chats, get_recent_messages, and wait_for_reply.

vunversioned · static queued · execution queued

Unscanned

Tempreon

MCP server that provides a portable personal knowledge layer for AI tools, enabling cross-LLM continuity and personalized context across clients like Claude, ChatGPT, and Cursor.

vunversioned · static queued · execution queued

Unscanned

terse

A transparent proxy that sits in front of any other MCP server and shrinks its tool output before it reaches the model. Lossless by default: the transformed bytes are a denser encoding of the same data, with a round-trip gate asserting an exact inverse over the corpus, so nothing is dropped, summarised, or offloaded to a cache that expires. Repeated calls to the same tool emit a delta against the

vunversioned · static queued · execution queued

Unscanned

tersign

MCP server for Tersign, the evidence layer for agent commerce, enabling agents to issue, verify, and manage signed receipts, compliance records, refunds, and disputes on a counter-signed hash-chained ledger.

vunversioned · static queued · execution queued

Unscanned

tradingcli

Local paper-trading and market simulation MCP server for multi-account portfolios, advanced orders, options/futures, backtesting, alerts, and automation.

vunversioned · static queued · execution queued

Unscanned

unifi-rmcp

MCP server and CLI for UniFi Network controllers: clients, devices, WLANs, firewall, and health over stdio or streamable HTTP, with auth.

vunversioned · static queued · execution queued

Unscanned

unorouter-mcp

MCP server for UnoRouter, an OpenAI-compatible gateway with 200+ models, providing search_models, get_pricing, and chat tools to interact with various AI models through natural language.

vunversioned · static queued · execution queued

Unscanned

Upstash Redis MCP

Lightweight MCP server for Redis that allows running any Redis command and searching Redis documentation. Supports multiple named databases with HTTP/REST or TCP transport.

vunversioned · static queued · execution queued

Unscanned

vault-mcp-server

MCP server to query and modify an Obsidian vault or any folder of markdown files. It provides search, tag filtering, backlinks, and CRUD operations on notes, with path traversal protection.

vunversioned · static queued · execution queued

Unscanned

vercel-deployment-mcp

A reference MCP server for observing Vercel projects and deployments over stdio. It provides read-only tools to list and fetch details of Vercel projects and deployments.

vunversioned · static queued · execution queued

Unscanned

Catalog coverage

Every version record returned by the last completed official Registry cursor sweep.

Static coverage

Metadata and artifact checks completed for the current content-bound revision.

Execution coverage

Sandbox behavior checks; unavailable until a conforming external worker completes them.