security

Security

Every MCP risk signal in one place — CVEs, tool safety, drift, naming, licenses. Heuristic: review signals, not verdicts. New here? The Risk tab gives an at-a-glance composite grade per server; the Code Analysis tab shows what the static scanner found in published source.

Capability drift: a tracked server gaining a permission, adding/removing a tool, rewriting a description, or losing verified status between captures — a review signal, not a verdict.

  1. HIGH SECBLOK/belay code analysis flagged committed secret in SECBLOK/belay
  2. HIGH oscardvs/anamnesis code analysis flagged committed secret in oscardvs/anamnesis
  3. HIGH Straska7/cc-history code analysis flagged committed secret ×2 in Straska7/cc-history
  4. HIGH jztan/redmine-mcp-server code analysis flagged dynamic code execution in jztan/redmine-mcp-server
  5. HIGH WenyuChiou/research-hub code analysis flagged dynamic code execution in WenyuChiou/research-hub
  6. HIGH wbso-ai/slop-off code analysis flagged dynamic code execution in wbso-ai/slop-off
  7. HIGH MK-986123/server-memory code analysis flagged dynamic code execution in MK-986123/server-memory
  8. HIGH rit-ops14/nexus-analyst code analysis flagged dynamic code execution in rit-ops14/nexus-analyst
  9. HIGH ChrisGVE/localdata-mcp code analysis flagged dynamic code execution ×5 in ChrisGVE/localdata-mcp
  10. HIGH ishrath99/gargantua code analysis flagged dynamic code execution in ishrath99/gargantua
  11. HIGH awslabs/cli-agent-orchestrator code analysis flagged committed secret, dynamic code execution ×3 in awslabs/cli-agent-orchestrator
  12. HIGH GimbalGoats/GG_MayaMCP code analysis flagged dynamic code execution in GimbalGoats/GG_MayaMCP
  13. HIGH technomaton/edpa code analysis flagged dynamic code execution in technomaton/edpa
  14. HIGH enmanuelmag/agent-harness-kit code analysis flagged dynamic code execution in enmanuelmag/agent-harness-kit
  15. HIGH KrakenNet/fathom code analysis flagged dynamic code execution in KrakenNet/fathom
  16. HIGH KunAgent/Kun code analysis flagged committed secret ×2, dynamic code execution ×4 in KunAgent/Kun
  17. HIGH memtomem/memtomem-stm code analysis flagged committed secret ×2 in memtomem/memtomem-stm
  18. HIGH tylerbuilds/deepseek-harness code analysis flagged committed secret in tylerbuilds/deepseek-harness
  19. HIGH Intellimetrics/llm-council code analysis flagged committed secret ×2, dynamic code execution in Intellimetrics/llm-council
  20. HIGH fusengine/fuse-browser code analysis flagged dynamic code execution in fusengine/fuse-browser
  21. HIGH ace19-dev/agentic-ai-common-tools code analysis flagged dynamic code execution in ace19-dev/agentic-ai-common-tools
  22. HIGH prahaladuk2208-arch/geeflow code analysis flagged dynamic code execution in prahaladuk2208-arch/geeflow
  23. HIGH DataViking-Tech/Althing code analysis flagged dynamic code execution in DataViking-Tech/Althing
  24. HIGH prismal-ai/prismal code analysis flagged dynamic code execution ×2 in prismal-ai/prismal
  25. HIGH reichenbach/iwork_mcp code analysis flagged dynamic code execution in reichenbach/iwork_mcp