MCP Security

@everychart

Basic information

About MCP Security

A standardized security evaluation framework for MCP servers, including assessment templates and an automated vulnerability scanner. This registry helps developers identify secure implementations for AI applications and promotes best practices across the MCP ecosystem.

MCP Security config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

MCP Security tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mcp Security?

Mcp Security is a community-driven registry that provides standardized security evaluations for Model Context Protocol (MCP) server implementations. It helps developers and organizations assess the security posture of MCP servers using LLM-based analysis.

How to use Mcp Security?

To request a certification, submit your publicly accessible GitHub repository URL through the certification request form. Detailed security analysis and certification results are delivered privately via email. Optionally, address identified issues and request a re-evaluation for a higher certification level.

Key features of Mcp Security

LLM-based security analysis of MCP servers
Three certification levels: Bronze, Silver, Gold
Transparent, actionable certification process
Private delivery of detailed results
Standardized evaluation template for comprehensive coverage
Community-driven contributions and improvements

Use cases of Mcp Security

Evaluate security of an MCP server before deployment
Identify vulnerabilities in existing MCP implementations
Achieve certification to demonstrate security best practices
Compare security posture across different MCP servers
Improve implementation security through actionable recommendations

Frequently asked questions

What certification levels are available?

MCP implementations can receive Bronze (meets basic requirements), Silver (recommended practices), or Gold (no critical/high vulnerabilities) certification.

How do I get my MCP server evaluated?

Submit your publicly accessible GitHub repository URL through the certification request form to receive a security analysis and certification results via email.

What is the certification process?

The process includes repository submission, LLM-based analysis, security profile generation, certification assignment, and private results delivery to the repository owner.

Where can I find the evaluation criteria?

Detailed requirements for each certification level are described in the Evaluation Criteria document (evaluation-criterea.md) referenced in the project.

What license does Mcp Security use?

This project is licensed under the MIT License.

Comments

More Developer Tools MCP servers

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

Termany

thinkany-ai

Agent-Native Terminal

174

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U