tryb

Evidence-first beta

MCP Security Observatory

The complete latest official Registry sweep, separated from static and execution scan coverage. Absence of findings is never presented as a safety claim.

Security Index

Pending

0 comparable scans

Monitored

0

Public server identities

High risk

0

Latest completed scan

Open findings

0

Public, non-embargoed

Disclosures

0

Responsible disclosure records

30229 canonical servers

Page 80 of 1512

ws-mcp

MCP server that exposes WebSocket session management as tools, allowing AI agents to open persistent connections, send typed frames, drain buffered messages, and monitor per-frame Shannon entropy to detect schema divergence.

vunversioned · static queued · execution queued

Unscanned

PaddleOCR MCP Server

Enables OCR text extraction from images and PDFs via MCP tools, allowing multiple devices on a local network to use PaddleOCR without installing it locally.

vunversioned · static queued · execution queued

Unscanned

health-mcp

An MCP server that securely syncs and queries your health data from Apple Health, storing it in your own Supabase Postgres database and exposing tools for AI assistants to retrieve weight, calories, macros, and more.

vunversioned · static queued · execution queued

Unscanned

jira-mcp-server

Stdio-based MCP server exposing Jira tools for searching, creating, getting, commenting on, assigning, and transitioning issues, as well as listing projects, with authentication via token or basic auth.

vunversioned · static queued · execution queued

Unscanned

weather-mcp-server

Provides weather alerts and forecasts for US locations using the National Weather Service API.

vunversioned · static queued · execution queued

Unscanned

ACP Governance MCP Server

Governs AI agent tool calls by checking them against Agentic Control Plane policies, returning allow/deny/ask decisions with audit logging and identity attribution for MCP clients like Claude and ChatGPT. Exposes acp_check and acp_status tools for policy enforcement and connection verification.

vunversioned · static queued · execution queued

Unscanned

affiliate-networks-mcp

MCP server that integrates affiliate networks with Claude and Codex, enabling natural language queries across publisher and advertiser-side data from multiple networks.

vunversioned · static queued · execution queued

Unscanned

AgentCAD

Enables engineering agents to perform parametric CAD operations through a controlled MCP gateway built on FreeCAD, with transactions, diagnostics, and reproducible verification.

vunversioned · static queued · execution queued

Unscanned

AI Test Automation MCP Server

Exposes AI agents as MCP tools to fetch Jira stories, generate BRDs and Playwright test scripts, run tests, and auto-heal broken locators. Integrates with Claude Desktop and Cursor IDE for enterprise-grade test automation.

vunversioned · static queued · execution queued

Unscanned

ailab_rip_mcp_app

A demo MCP server that exposes stock-quote tools to LLMs via FastMCP over streamable HTTP. It can be deployed to AWS ECS and integrated with ChatGPT as a custom connector.

vunversioned · static queued · execution queued

Unscanned

askell-mcp

MCP server for Askell's payment and subscription API, allowing users to discover API operations, make raw API calls with approval for mutations, and analyze customers, contracts, billing runs, and webhooks.

vunversioned · static queued · execution queued

Unscanned

Bloopo

Hosted MCP server that turns a one-line brief into finished, on-brand ad creative, including short video ads, product photos, and voiceover, with A/B variant testing and performance feedback loops.

vunversioned · static queued · execution queued

Unscanned

ccpedia

Enables AI agents to query the Canton Network ecosystem through a unified MCP endpoint, providing live data from forums, GitHub, docs, CIPs, and more with read-only access.

vunversioned · static queued · execution queued

Unscanned

Cite Caddy

Provides full read/write access to Zotero libraries through 36 MCP tools, including search, add, tag, update, delete, and move operations for items, collections, attachments, notes, and saved searches. Enables AI assistants to manage a Zotero library remotely, with support for both local stdio and multi-tenant HTTP OAuth deployments.

vunversioned · static queued · execution queued

Unscanned

claude-boardroom

A local MCP server enabling multiple Claude Code and Claude Desktop conversations to exchange messages through a shared SQLite file, with a UI for moderating rooms.

vunversioned · static queued · execution queued

Unscanned

claws-mail

Enables AI tools to read, search, compose, reply, forward, and manage Claws Mail folders and messages through the user's already-configured email accounts via a local MCP server.

vunversioned · static queued · execution queued

Unscanned

ClearList MCP Server

Enables AI agents to manage resale operations, including onboarding sellers, creating listings, publishing sale pages, and managing buyers via the ClearList API.

vunversioned · static queued · execution queued

Unscanned

Code-Fundi MCP Server

A production-grade MCP server for the Code-Fundi API, enabling AI agents to map codebases, search semantically, and analyze blast radius. It provides tools for repository management, AI-powered research, and impact analysis before shipping changes.

vunversioned · static queued · execution queued

Unscanned

codebase-synapse

An MCP server that indexes codebases into a local knowledge graph, providing 52 AI tools for semantic search, call-graph traversal, git archaeology, and impact analysis to give AI agents deep understanding of code.

vunversioned · static queued · execution queued

Unscanned

Commerce Ops MCP

Enables commerce operations teams to investigate missing-delivery complaints and resolve them through natural language, with policy-enforced refunds and escalations.

vunversioned · static queued · execution queued

Unscanned

Catalog coverage

Every version record returned by the last completed official Registry cursor sweep.

Static coverage

Metadata and artifact checks completed for the current content-bound revision.

Execution coverage

Sandbox behavior checks; unavailable until a conforming external worker completes them.