MCPSafe

What it does

MCP servers let AI access your files, APIs, and databases. But are they safe? MCPSafe scans for SQL injection, code execution, and hardcoded secrets before you install. We've found 1,200+ vulnerabilities across 300 servers. Free and open-source.

MCPSafe is a security scanner and quality registry for Model Context Protocol (MCP) servers. Scan, verify, and discover trusted MCP servers.

MCPSafe is the security scanner and quality registry for Model Context Protocol servers. Registry metadata is live; public security findings are published only after review gates pass. Verified MCP server entries with live source metadata. Security scores return only after reviewed findings are enabled. Public vulnerability claims stay behind review gates, but the homepage should still show the MCP-specific risk classes our scanner looks for. Security analysis for MCP servers with reviewed-publication gates to avoid unverified claims. Deep analysis of MCP server code for vulnerabilities, unsafe patterns, and potential security risks. AST-based parsing to detect command injection, credential…from mcpsafe.org

In the maker’s words, at launch

We've been scanning MCP (Model Context Protocol) servers to understand the security posture of the ecosystem. After 306 servers and 1,211 vulnerabilities, here's what we found: - 69 critical vulnerabilities - 32 servers using eval() on untrusted input - 31 SQL injection vulnerabilities - 32 servers with hardcoded API…

• 
  Risk Analysis Database of Every MCP ServerFeb 2026 · mcp.armor1.ai · ▲22

  Hi HN, We’re building security tooling around agentic AI systems. Today, we're releasing our public MCP catalog with detailed risk analysis for every MCP server we've found on the internet: https://mcp.armor1.ai/mcp-directory We all love agents and the power that MCPs unlock: suddenly your AI assistant can query databases, manage files, call APIs, and interact with the real world. But when we started adopting MCPs ourselves, we kept running into the same nagging questions: Is this MCP safe? Where is my data actually going? Could it execute destructive actions? Is it…

• 
  Stash MCP Server2025 · ▲441

  Make AI IDEs even smarter with your team’s knowledge

• 
  MCP-Shield – Detect security issues in MCP servers2025 · github.com · ▲134

  I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…

• 
  Cloud-Ready Postgres MCP Server2025 · github.com · ▲167

  Hey HN, I built pg-mcp, a Model Context Protocol (MCP) server for PostgreSQL that provides structured schema inspection and query execution for LLMs and agents. It's multi-tenant and runs over HTTP/SSE (not stdio) Features - Supports multiple database connections from multiple agents - Schema Introspection: Returns table structures, types, indexes and constraints; enriched with descriptions from pg_catalog. (for well documented databases) - Read-Only Queries: Controlled execution of queries via MCP. - EXPLAIN Tool: Helps smart agents optimize queries before execution. - Extension…

• 
  Secure MCP Framework by Arcade.devNov 2025 · arcade.dev · ▲272

  Skip migration and launch MCP with built-in Auth

• 
  MCPTotalDec 2025 · a16y.ai · ▲179

  Secure MCP servers that just work

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 17d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 18d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  Onepin▲384

  AI voiceover with every name, price and date said right

  AI · 30d ago · onepin.ai

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 28d ago · world.pixverse.video

• 
  Rork Max▲1,428

  Best AI for iOS apps. Website that replaces Xcode

  Life & fun · Feb 2026 · rork.com

• 
  happycapy▲1,365

  The agent-native computer, for the rest of us

  AI · Feb 2026 · happycapy.ai

• 
  SuperX▲897

  All-in-one growth OS for serious 𝕏 creators

  AI · Feb 2026 · superx.so

• 
  KiloClaw▲868

  Hosted OpenClaw. No Mac mini required.

  Dev tools · Feb 2026 · kilo.ai

• 
  Lovon AI Therapy▲801

  Feel closer and have more fun with your partner every day!

  AI · Feb 2026 · lovon.app

• 
  I spent 3 years reverse-engineering a 40 yo stock market sim from 1986▲721

  Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.

  Work · Feb 2026 · wallstreetraider.com