tryb

Evidence-first beta

MCP Security Observatory

The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.

Security Index

Pending

0 comparable scans

Monitored

0

Public server identities

High risk

0

Latest completed scan

Open findings

0

Public, non-embargoed

Disclosures

0

Responsible disclosure records

30229 canonical servers

Page 71 of 1512

browser-relay

MCP server that drives a user's real Chrome browser via a WebSocket-connected MV3 extension, enabling tab management, navigation, page interaction, screenshots, and script evaluation through natural language.

vunversioned · static queued · execution queued

Unscanned

brvm-mcp

MCP server providing access to BRVM (West African regional stock exchange) public data, including real-time quotes, market summaries, dividends, fundamentals, volumes, and sector indices through 18 tools.

vunversioned · static queued · execution queued

Unscanned

BYD Vehicle Bridge MCP Server

A secure, read-only MCP server that connects to BYD electric vehicles via the BYD cloud API, enabling AI agents to query real-time vehicle data such as battery SOC, range, tire pressures, door states, and GPS.

vunversioned · static queued · execution queued

Unscanned

cinch-mcp

MCP server that gives AI assistants a secure gVisor-isolated sandbox to run Python or JavaScript code, returning stdout, stderr, and exit codes without local access.

vunversioned · static queued · execution queued

Unscanned

CodeHands

An MCP server that gives web AI assistants like ChatGPT and Claude Chat hands-on control over a local development machine, enabling them to read, edit, and execute code through a safe, policy-checked interface.

vunversioned · static queued · execution queued

Unscanned

Cognitive Exoskeleton MCP Server

Builds a dynamic knowledge graph from your notes and uses LLM reasoning to discover blindspots, hidden cross-domain connections, track concept evolution, and spark creative inspiration.

vunversioned · static queued · execution queued

Unscanned

com.aleeth/authority-mcp

A governed MCP server exposing 37 risk-checked tools with signed Ed25519 receipts on a Bitcoin-anchored ledger, failing closed if governance or receipt writing fails.

vunversioned · static queued · execution queued

Unscanned

comfyui-workflow-editor-mcp

A lightweight MCP server that bridges AI agents with a local ComfyUI instance, enabling them to generate and iteratively refine images, audio, and video through conversational tool calls.

vunversioned · static queued · execution queued

Unscanned

compliance-evidence-agent

An MCP server that automates the collection and verification of SOC 2 compliance evidence across multiple systems, detecting gaps and ensuring evidence is current, complete, and properly attested.

vunversioned · static queued · execution queued

Unscanned

CryptoAPIs x402 Pay MCP

Enables AI agents to discover and pay for x402-gated HTTP APIs, handling 402 Payment Required flows with local signing. Supports EVM and Solana with non-custodial wallet management.

vunversioned · static queued · execution queued

Unscanned

cwtools-mcp

Read-only MCP server exposing CWTools Paradox/Stellaris semantic tools (syntax checking, scope queries, definitions, references, diagnostics, scripted triggers/effects/enums, and shader queries) to AI agents like Codex and Claude Code, bridging into VS Code-compatible hosts or running standalone.

vunversioned · static queued · execution queued

Unscanned

daraja-mcp

Enables interaction with Safaricom M-Pesa Daraja 3.0 API, covering payments, disbursements, treasury, and fraud checks, with a built-in simulator for testing without credentials.

vunversioned · static queued · execution queued

Unscanned

diffsorted

Splits messy, multi-concern git diffs into focused groups and generates a clear, accurate commit message for each, exposed as an MCP server for use with MCP-compatible clients.

vunversioned · static queued · execution queued

Unscanned

dir-mcp

Enables AI assistants and IDEs to work with the AGNTCY Agent Directory, providing tools for validating, publishing, searching agent records, and navigating OASF taxonomies.

vunversioned · static queued · execution queued

Unscanned

documentero

Enables AI agents to list Documentero templates, inspect their field schemas, and generate Word/PDF/Excel documents via the Documentero API.

vunversioned · static queued · execution queued

Unscanned

ellmos-controlcenter-mcp

An alpha-stage MCP control plane for local MCP stacks, enabling discovery of local servers, profile management, capability bundles, tool-list probes, and a local dashboard.

vunversioned · static queued · execution queued

Unscanned

ellmos-homebase-mcp

Enables local-first LLM orchestration with persistent memory, knowledge management, routing, swarm patterns, API probing, tests, automation planning, and plugin discovery via a stdio MCP server, using SQLite for offline storage.

vunversioned · static queued · execution queued

Unscanned

ellmos-servercommander-mcp

Alpha MCP server for server operations enabling deployment dry-runs, mail readiness diagnostics, access-log analysis, and HTTP health checks.

vunversioned · static queued · execution queued

Unscanned

enpass-mcp

Provides local, secure access to Enpass password vaults via MCP. Enables unlocking vaults, listing entries, retrieving passwords, TOTP codes, and attachments, with optional write support.

vunversioned · static queued · execution queued

Unscanned

EVIDIQ Bastion

Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.

vunversioned · static queued · execution queued

Unscanned

Catalog coverage

Every version record returned by the last completed official Registry cursor sweep.

Static coverage

Metadata and artifact checks completed for the current content-bound revision.

Execution coverage

Sandbox behavior checks; unavailable until a conforming external worker completes them.