security
Security
Every MCP risk signal in one place — CVEs, tool safety, drift, naming, licenses. Heuristic: review signals, not verdicts. New here? The Risk tab gives an at-a-glance composite grade per server; the Code Analysis tab shows what the static scanner found in published source.
91 CRITICAL
7932 HIGH
2846 MEDIUM
4763 LOW
16 NONE
License hygiene: servers missing a license or carrying a strong-copyleft, non-commercial, or unrecognized one — informational, not part of the composite risk score.
- unrecognized kugamon/salesforce-core-skills NOASSERTION
- missing / unlicensed Waterkyuu/vimo-chat — no license declared —
- unrecognized sailingsam/tryjarvis NOASSERTION
- strong copyleft drhelius/Gearsystem GPL-3.0
- strong copyleft Applire/Applire AGPL-3.0
- missing / unlicensed gtm-api/docs — no license declared —
- unrecognized CSOAI-ORG/vector-knowledge-graph-mcp NOASSERTION
- strong copyleft zeweihan/aiworkdeck AGPL-3.0
- unrecognized SukramJ/openccu-loom NOASSERTION
- unrecognized Atypical-Consulting/ASTral NOASSERTION
- strong copyleft repowise-dev/repowise AGPL-3.0
- strong copyleft siyuan-note/siyuan AGPL-3.0
- unrecognized joiha-steven/quireink NOASSERTION
- unrecognized systempromptio/systemprompt-demo NOASSERTION
- strong copyleft AmoabaKelvin/logdeck GPL-3.0
- unrecognized jyswee/taufunctions NOASSERTION
- unrecognized Aureliolo/synthorg NOASSERTION
- missing / unlicensed PrinceOfPwn/Munin — no license declared —
- strong copyleft finlynq/finlynq AGPL-3.0
- missing / unlicensed tobiasschuerg/paperless-agent-toolkit — no license declared —
- missing / unlicensed satyam0singh/Agentic-AI — no license declared —
- missing / unlicensed conorluddy/Vestige — no license declared —
- unrecognized NateBJones-Projects/OB1 NOASSERTION
- unrecognized PM-Shawn/Abu-Cowork NOASSERTION
- missing / unlicensed sandlong/openclacky-container — no license declared —