MCP server registry, checked every day
The full official MCP Registry: 61,326 servers and 241,494 versions, checked every night against public bug databases. A red flag means someone reported a problem. Look before you install.
61,326servers watched
87have a reported issue
9list a version with a reported issue
Last checked 5 hours ago. No flag does not mean safe, only that nothing has been reported publicly. For a full trust grade, see the graded directory.
| Server | Runs as | Listed version | Reported issues |
|---|---|---|---|
| io.github.jeremdecustovox/custovox-review-analyzer custovox.ai MCP server: customer review sentiment breakdown and summaries (up to 100 reviews) | pypi | 1.0.01 version | None reported |
| AgentBroker Index Read-only, sourced data on which brokers, banks and crypto exchanges AI agents can use (EU/Spain). | remote | 0.1.01 version | None reported |
| Get Around Hong Kong Hong Kong public transport trips (MTR, bus, minibus, ferry), live times, fares and border queues. | remote | 1.6.05 versions | None reported |
| io.github.GuardBee/slopsquat-scanner Checks declared npm/PyPI dependencies against real registries to catch slopsquatting | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/threat-rules GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection | npm | 0.5.114 versions | None reported |
| io.github.GuardBee/prompt-leak-scanner Catches leaked credentials and PII in outbound LLM prompts | npm | 1.1.123 versions | None reported |
| io.github.GuardBee/context-oversharing-auditor OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks | npm | 0.4.17 versions | None reported |
| io.github.GuardBee/toxic-flow-auditor Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress | npm | 1.1.123 versions | None reported |
| io.github.GuardBee/a2a-auditor Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/agent-graph-auditor Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/ai-code-scanner Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection | npm | 0.5.16 versions | None reported |
| io.github.GuardBee/audit-gap-auditor OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit | npm | 0.4.17 versions | None reported |
| io.github.GuardBee/compliance-checker KVKK/GDPR/CCPA compliance checks for codebases | npm | 0.4.16 versions | None reported |
| io.github.GuardBee/db-gateway KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log | npm | 0.7.113 versions | None reported |
| io.github.GuardBee/dns-intelligence DNS record enumeration, misconfiguration and dangling-subdomain detection | npm | 0.10.111 versions | None reported |
| io.github.GuardBee/document-scanner Finds PII and credentials in PDFs, screenshots and scanned documents | npm | 0.4.114 versions | None reported |
| io.github.GuardBee/elicitation-auditor MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/llm-redteam Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/mcp-server-auditor Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets | npm | 0.4.18 versions | None reported |
| io.github.GuardBee/memory-poisoning-scanner Scans agent code for untrusted input poisoning persistent cross-session memory | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/oauth-auditor Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience | npm | 0.5.19 versions | None reported |
| io.github.GuardBee/secret-scanner Scans files for leaked secrets and API keys | npm | 1.1.123 versions | None reported |
| io.github.GuardBee/ssl-inspector TLS certificate/cipher/protocol inspection | npm | 0.5.16 versions | None reported |
| io.github.GuardBee/unbounded-consumption-auditor Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6) | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/vector-store-scanner Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data | npm | 0.3.16 versions | None reported |
| io.github.GuardBee/vulnerability-scanner Triggers GuardBee scans, queries findings, AI-assisted remediation guidance | npm | 0.4.16 versions | None reported |
| Lettance account Your rental records in your own AI: homes, rent, repairs and renewal proposals. Sign-in required. | remote | 1.4.15 versions | None reported |
| Lettance Landlord rules for England by postcode: council licensing, the landlord register and the law, cited. | remote | 1.4.15 versions | None reported |
| World Feed Monitor Search and follow news from 234 countries: recent articles, publishers and coverage. | remote | 1.0.01 version | None reported |
| Klevero Search Turkish curriculum topic notes (LGS, YKS, grades 5-12) and fetch them as Markdown. | remote | 1.0.01 version | None reported |
| Stock Compass Watchlist, signals, trades and journal for HK, US and China A-share stocks. Records only; no orders. | remote | 1.0.01 version | None reported |
| AppTierList Ranked iPhone app lists by use case (S to F) from public App Store data. Read-only, no key. | remote | 1.0.01 version | None reported |
| ZenBot Stock Scanner Real-time US stock scanner: your scans, any ticker, charts, why a stock is on a scan. Turbo. | remote | 1.1.01 version | None reported |
| Pro UPI QR UPI payment links and QR codes, UPI error help, and GST, MSMED and MDR calculators for India. | remote | 1.1.01 version | None reported |
| Workstream Shared task ledger for AI agents and humans: atomic claims, state machine, GitHub and Slack sync | oci | 0.3.14 versions | None reported |
| DAIly outfits What to wear today by city weather and travel packing lists by destination. Public, read-only. | remote | 0.1.12 versions | None reported |
| HAL Customer conversations, help center, CRM, deals and email campaigns on HAL (chatwithhal.com). | remote | 1.0.01 version | None reported |
| Damper Feedback, roadmap, agent task execution with review, changelog, status pages and error logs. | remote | 0.6.01 version | None reported |
| Money Reactor Pay-per-call x402 MCP for AI agents: 35 tools, USDC on Base, from $0.001/call, no API keys. | remote | 1.5.01 version | None reported |
| insc.one — INSC.1 Citation Layer Bench-aware citator for Supreme Court of India precedent: verified INSC cites, extractive ratios. | remote | 0.1.01 version | None reported |
| peaks.fyi — Mountain Routes, Huts & Weather European mountain routes, huts, access and forecasts with sources and explicit unknowns. | remote | 3.1.01 version | None reported |
| TextKit SMS for developers: send and receive texts, verify phones, and buy US and Canada numbers. | remote | 1.0.23 versions | None reported |
| Vila Marcelka – guesthouse in Broumov Official server of Vila Marcelka guesthouse, Broumov (CZ): facts, live availability and prices. | remote | 1.1.01 version | None reported |
| Serpier Track AI visibility and SEO performance, monitor publications and manage link-building orders. | remote | 1.0.34 versions | None reported |
| Earth & Sky Live earthquakes, ISS position, weather, moon phase, and true star visibility. No key. | remote | 1.0.01 version | None reported |
| Superset public catalog Superset's published program templates and page metadata, and a way to request a trial. | remote | 1.1.01 version | None reported |
| Superset Fitness Coaching Fitness MCP for coaches and gyms: build workouts and read clients' training from live Superset data. | remote | 1.0.11 version | None reported |
| Vergabeweiser German public tenders and contract awards: search, deadlines, winners, market figures. Open data. | remote | 1.0.01 version | None reported |
| io.github.Muhandis-online/rls-check Read-only Supabase RLS check: explains in Arabic which tables anyone can read or change. No keys. | npm | 0.1.22 versions | None reported |
| CatchLoop Product feedback for SaaS: requests, widget bugs with screenshots, changelog drafts. | remote | 1.0.22 versions | None reported |