MCP Observatory
6m ago Tracked 26,538 Last 6m ago 24h 1,935
security

Security

Every MCP risk signal in one place — CVEs, tool safety, drift, naming, licenses. Heuristic: review signals, not verdicts. New here? The Risk tab gives an at-a-glance composite grade per server; the Code Analysis tab shows what the static scanner found in published source.

MCP-native tool-safety findings (tool poisoning, exfiltration combos, name shadowing, benign-dangerous tools, unconstrained schemas) from pure heuristics, newest-detected first; switch to the severity worklist to triage by impact — every row is a review signal with its evidence, never a verdict.

sort recent severity
  • dangerous code 1212H 1796M 3988L
  • exfiltration combo 25H 124M 688L
  • toxic flow (lethal trifecta) 19H 482M
  • purpose mismatch 118M 36L
  • hidden prompt content 63H 11L
  • tool shadowing 35M
  • tool poisoning 1H 19M
  • rug pull 6M
  • loose schema 5M
  • cross-server steering 3M
  1. HIGH dangerous code jakbuczarnecki/intergrax committed secret: Slack token · dynamic exec: pickle.loads(), __import__()
  2. MEDIUM dangerous code evalstate/fast-agent dynamic exec: eval()/exec()
  3. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/to
  4. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/to
  5. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/to
  6. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/to
  7. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/sp
  8. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/se
  9. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/se
  10. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  11. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  12. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  13. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  14. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  15. LOW dangerous code joergensentroels/Bureau env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (joergensentroels-Bureau-b740ea0/ev
  16. LOW dangerous code AmrDab/clawdcursor env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (AmrDab-clawdcursor-189092d/src/sur
  17. LOW dangerous code AmrDab/clawdcursor env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (AmrDab-clawdcursor-189092d/src/pla
  18. LOW dangerous code AmrDab/clawdcursor env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (AmrDab-clawdcursor-189092d/src/pla
  19. LOW dangerous code AmrDab/clawdcursor env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (AmrDab-clawdcursor-189092d/src/pla
  20. HIGH dangerous code BaiGanio/aperio dynamic exec: vm exec · obfuscated payload: dynamic require()/import()
  21. MEDIUM dangerous code BaiGanio/aperio env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (BaiGanio-aperio-bf4c801/bootstrap.
  22. MEDIUM dangerous code balanced7/akashic-aurora dynamic exec: eval()/exec()
  23. MEDIUM dangerous code xopcai/xopc dynamic exec: new Function(), indirect eval
  24. LOW dangerous code Applire/Applire env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (Applire-Applire-59f891f/frontend/a
  25. HIGH dangerous code SukramJ/openccu-loom committed secret: private key