MCP Observatory
6m ago Tracked 26,538 Last 6m ago 24h 1,935
security

Security

Every MCP risk signal in one place — CVEs, tool safety, drift, naming, licenses. Heuristic: review signals, not verdicts. New here? The Risk tab gives an at-a-glance composite grade per server; the Code Analysis tab shows what the static scanner found in published source.

Name-impersonation radar: servers whose name closely mimics a verified or official-scope server by a different maintainer — a review signal (forks and language ports can trip it), not a verdict.

  1. Forkit mimics @forkbit/mcp 1 edit
  2. nyxora mimics @nyxory/mcp 1 edit
  3. snapshot-site-s/snapshot-site-mcp mimics snapshot-site/snapshot-site-mcp 1 edit