AI · alternatives · 2026
24 alternatives to MCPSafe
We've been scanning MCP (Model Context Protocol) servers to understand the security posture of the ecosystem. After 306 servers and 1,211 vulnerabilities, here's what we found: - 69 critical vulnerabilities - 32 servers using eval() on untrusted input - 31 SQL injection vulnerabilities - 32 servers with hardcoded API credentials 10.5% of servers have at least one critical vulnerability. MCP servers run with your permissions. AI agents trust them implicitly. A prompt injection can exploit them remotely. MCPSafe (https://mcpsafe.org) lets you scan before you connect. Free tier…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
mcp-usefree tier, from $25/mo▲581Hi HN, Luigi here. We maintain mcp-use an open-source TypeScript framework for building MCP servers and MCP Apps: https://github.com/mcp-use/mcp-use MCP is now (finally) stateless so we rewrote mcp-use v2 from scratch for the 2026-07-28 MCP spec revision: https://blog.modelcontextprotocol.io/posts/2026-07-28/ Thanks to the rebuild: - Throughput: +27% → from 8,615 to 10,982 median ops/sec - Cold launch: 2.2x faster → from 151.6 ms to 68.1 ms - Clean install: 82% smaller → from 404.6 MiB to 74.4 MiB Benchmark with methodology here:…
2025 · manufact.com · its alternatives →
- 2
Hi HN, We’re building security tooling around agentic AI systems. Today, we're releasing our public MCP catalog with detailed risk analysis for every MCP server we've found on the internet: https://mcp.armor1.ai/mcp-directory We all love agents and the power that MCPs unlock: suddenly your AI assistant can query databases, manage files, call APIs, and interact with the real world. But when we started adopting MCPs ourselves, we kept running into the same nagging questions: Is this MCP safe? Where is my data actually going? Could it execute destructive actions? Is it…
Feb 2026 · mcp.armor1.ai · its alternatives →
- 3
- 4
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 5
Hey HN, I built pg-mcp, a Model Context Protocol (MCP) server for PostgreSQL that provides structured schema inspection and query execution for LLMs and agents. It's multi-tenant and runs over HTTP/SSE (not stdio) Features - Supports multiple database connections from multiple agents - Schema Introspection: Returns table structures, types, indexes and constraints; enriched with descriptions from pg_catalog. (for well documented databases) - Read-Only Queries: Controlled execution of queries via MCP. - EXPLAIN Tool: Helps smart agents optimize queries before execution. - Extension…
2025 · github.com · its alternatives →
- 6
Skip migration and launch MCP with built-in Auth
Nov 2025 · arcade.dev · its alternatives →
- 7
- 8
- 9
Pipedream MCP▲2912,500+ APIs and 10,000+ tools for your AI assistant
2025 · mcp.pipedream.com · its alternatives →
- 10
Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…
Mar 2026 · permit.io · its alternatives →
- 11
MCP Playground▲160MCP Playground is a Postman-style tool for MCP — inspect servers, execute tools live, test your client, all from the browser. Four things in one place: 1. Free hosted MCP servers — four public test servers anyone can point their client at: Echo (connectivity), Auth (Bearer token flow), Error (error handling), Complex (multi-tool schemas).No sign-up, just use the URL. 2. Server inspector — paste any remote MCP server URL, see all its tools/resources/prompts, execute them live, inspect the full JSON-RPC log. HTTP, SSE, and WebSocket all supported. 3. Registry — 10,000+ servers…
Nov 2025 · mcpplayground.io · its alternatives →
- 12
Audit MCPs for security vulnerabilities.
May 2026 · mcpscanner.yxsh.in · its alternatives →
- 13
ContextGuard▲12I built ContextGuard after discovering that 43% of MCP servers have critical security vulnerabilities. MCP (Model Context Protocol) is the new standard that lets Claude Clients(Desktop, Windsurf, Cursor, etc.) access external tools and data sources - think of it as a plugin system for AI assistants. The problem: When you give those clients access to your filesystem, databases, or APIs through MCP servers, you're opening up serious attack vectors. Prompt injection, data leakage, and path traversal attacks are all possible. Most developers building MCP servers don't have security expertise,…
2025 · github.com · its alternatives →
- 14OS
Large Language Models (LLMs) are powerful, but they’re limited by fixed context windows and outdated knowledge. What if your AI could access live search, structured data extraction, OCR, and more—all through a standardized interface? We built the JigsawStack MCP Server, an open-source implementation of the Model Context Protocol (MCP) that lets any AI model call external tools effortlessly. Here’s what it unlocks: - Web Search & Scraping: Fetch live information and extract structured data from web pages. - OCR & Structured Data Extraction: Process images, receipts, invoices, and handwritten…
2025 · its alternatives →
- 15
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com · its alternatives →
- 16
MCP Builder▲115Instantly create & deploy MCP servers from any API spec
2025 · mcp.ag2.ai · its alternatives →
- 17
MCP Guardian▲12You can read more about EQTY Lab's enterprise-focused usage of this tooling here: https://www.eqtylab.io/blog/securing-model-context-protocol
Dec 2025 · guardianmcp.dev · its alternatives →
- 18
Hey everyone, I've wanted an easy way to control which mcp server tools are available to clients. So for example, I might want a gmail server to only expose the read tool (but not send, delete etc). I figured if I create a cli for spawning mcp servers, I could intercept the stdin, stdout, stderr etc and modify what the clients see when they are making calls to list tools, resources, and prompts. Well it worked! In the initial version you can easily add a server to claude with a safe list of tools: npx -y mcpgod add @modelcontextprotocol/server-everything --client claude --tools=echo,add…
2025 · github.com · its alternatives →
- 19
MCP Cloud▲52Deploy Model Context Protocol (MCP) servers with ease. Scale your AI models seamlessly with our cutting-edge platform.
2025 · mcp-cloud.ai · its alternatives →
- 20MT
https://github.com/mcp-shark/mcp-shark Site: https://mcpshark.sh/ I built MCPShark, a traffic inspector for the Model Context Protocol (MCP). It sits between your editor/LLM client and MCP servers so you can: • See all MCP traffic (requests, responses, tools, resources) in one place • Debug sessions when tools don’t behave as expected • Optionally run “Smart Scan” checks to flag risky tools / configs
Dec 2025 · its alternatives →
- 21
Scan MCP▲7MCP scanning & threat observability for AI-native tools
2025 · scanmcp.com · its alternatives →
- 22
Contribute to ShaojieJiang/mcp-is-dangerous development by creating an account on GitHub.
2025 · github.com · its alternatives →
- 23MH
Sep 2026 · ai.mcpharbor.dev · its alternatives →
- 24
Got tired of every MCP example being overly verbose, or needing Docker or Mac-only scripts, so I threw together MCP-123. Point it at a tools.py, run `server.run_server(...)`, and the client auto-discovers/calls functions with OpenAI. I hope this is useful to you all.
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →