VULNERABLE
AI & Cybersecurity Intelligence
  NEW THIS WEEK
  PACKAGES HIT
  CRITICAL
SYNCED
  READERS

TRUST BOUNDARY

How many third-party packages each MCP server pulls inside your agent. More packages means more attack surface — not more vulnerabilities. A server with 133 well-maintained dependencies can be safer than one with 6 hand-rolled ones.

  1. 1@wonderwhy-er/desktop-commander569B
  2. 2graphlit-mcp-server508A
  3. 3@elastic/mcp-server-elasticsearch440D
  4. 4@neondatabase/mcp-server-neon435D
  5. 5mongodb-mcp-server427A
  6. 6mcp-server-kubernetes409F
  7. 7@executeautomation/playwright-mcp-server346A
  8. 8@browserbasehq/mcp230A
show all 38
  1. 9firecrawl-mcp187A
  2. 10@notionhq/notion-mcp-server176A
  3. 11@heroku/mcp-server137A
  4. 12@modelcontextprotocol/server-filesystem133F
  5. 13exa-mcp-server133A
  6. 14@agentdeskai/browser-tools-mcp133A
  7. 15figma-developer-mcp133D
  8. 16tavily-mcp124A
  9. 17@modelcontextprotocol/server-puppeteer117D
  10. 18@sentry/mcp-server112A
  11. 19@modelcontextprotocol/server-sequential-thinking111A
  12. 20@upstash/context7-mcp109A
  13. 21@modelcontextprotocol/server-redis107D
  14. 22@modelcontextprotocol/server-everything106A
  15. 23@supabase/mcp-server-supabase104A
  16. 24@stripe/mcp95A
  17. 25@modelcontextprotocol/server-memory94A
  18. 26@modelcontextprotocol/server-everart94D
  19. 27mcp-remote81D
  20. 28@modelcontextprotocol/server-gdrive67D
  21. 29@modelcontextprotocol/server-github46D
  22. 30@modelcontextprotocol/server-gitlab46D
  23. 31@modelcontextprotocol/server-google-maps44D
  24. 32@modelcontextprotocol/server-aws-kb-retrieval39D
  25. 33@modelcontextprotocol/server-postgres29D
  26. 34@cloudflare/mcp-server-cloudflare26A
  27. 35@modelcontextprotocol/server-slack15D
  28. 36@modelcontextprotocol/server-brave-search15D
  29. 37@azure/mcp7D
  30. 38@playwright/mcp4D

marks 1 server where most of what resolves is prebuilt binaries, so the count understates what you install. @azure/mcp is 7 packages — all 7 platform binaries, one unpacking to 116 MB of compiled code. A 569-package tree of plain JavaScript is more auditable, not less. Read a low number there as less you can inspect, not less you are trusting.

Counts from real npm and pip resolution, refreshed weekly. Python target 3.12. Not a code audit.