MCP SERVER SECURITY DIRECTORY

→ Grade your own MCP config (browser-only, free)

Server	Ecosystem	Grade	Packages	Vulns	Findings
@aetherwealth/ mcp	npm	A	—	0	1
@agentdeskai/ browser-tools-mcp	npm	A	201	0	0
@agentskit/ doc-bridge	npm	A	—	0	0
@akutishevsky/ lunchmoney-mcp	npm	A	—	0	0
@alisaitteke/ photoshop-mcp	npm	A	—	0	0
@antv/ mcp-server-chart	npm	A	—	0	0
@ataraxy-labs/ sem	npm	B	—	0	1
@ateam-ai/ mcp	npm	A	—	0	0
@atlassian-dc-mcp/ confluence	npm	A	—	0	0
@atlassian-dc-mcp/ jira	npm	A	—	0	0
@auth0/ auth0-mcp-server	npm	A	—	0	0
@azure/ mcp	npm	B	7 ▲	0	1
@brave/ brave-search-mcp-server	npm	A	—	0	0
@brightdata/ mcp	npm	A	—	0	0
@browserbasehq/ mcp	npm	F	235	1	1
@browserbasehq/ mcp-server-browserbase	npm	D	—	0	2
@browserstack/ mcp-server	npm	A	—	0	0
@bytebase/ dbhub	npm	A	—	0	0
@cap-js/ mcp-server	npm	A	—	0	0
@chirpie/ mcp	npm	A	—	0	0
@clipform/ mcp-server	npm	A	—	0	0
@clize/ clize	npm	A	—	0	0
@cloudbase/ cloudbase-mcp	npm	A	—	0	0
@cloudflare/ mcp-server-cloudflare	npm	A	26	0	1
@cyanheads/ git-mcp-server	npm	A	—	0	0
@cyanheads/ mcp-ts-core	npm	A	—	0	0
@cyanheads/ pubmed-mcp-server	npm	A	—	0	0
@dangahagan/ weather-mcp	npm	A	—	0	0
@dbx-app/ mcp-server	npm	A	—	0	0
@delorenj/ mcp-server-trello	npm	A	—	0	0
@desplega.ai/ agent-swarm	npm	A	—	0	0
@discourse/ mcp	npm	A	—	0	0
@dynatrace-oss/ dynatrace-mcp-server	npm	D	—	0	1
@elastic/ mcp-server-elasticsearch	npm	D	392	0	1
@elitedcs/ ghl-mcp	npm	A	—	0	0
@esaio/ esa-mcp-server	npm	A	—	0	0
@executeautomation/ playwright-mcp-server	npm	A	347	0	0
@firfi/ huly-mcp	npm	A	—	0	0
@florentine-ai/ mcp	npm	A	—	0	0
@getbourdon/ mcp-server	npm	A	—	0	0
@gitkraken/ gk	npm	B	—	0	1
@growthbook/ mcp	npm	A	—	0	0
@heroku/ mcp-server	npm	A	139	0	0
@hypelens/ hypelens-agent-rail	npm	A	—	0	0
@hypothesi/ tauri-mcp-server	npm	A	—	0	0
@kaeawc/ auto-mobile	npm	A	—	0	0
@kinlab/ kin-mcp	npm	A	—	0	0
@letoribo/ mcp-graphql-enhanced	npm	A	—	0	0
@masonator/ coolify-mcp	npm	A	—	0	0
@microsoft/ powerbi-modeling-mcp	npm	A	—	0	0
@mobilenext/ mobile-mcp	npm	A	—	0	0
@modelcontextprotocol/ server-aws-kb-retrieval	npm	D	39	0	3
@modelcontextprotocol/ server-brave-search	npm	D	15	0	2
@modelcontextprotocol/ server-everart	npm	D	94	0	3
@modelcontextprotocol/ server-everything	npm	A	94	0	0
@modelcontextprotocol/ server-filesystem	npm	A	12	0	0
@modelcontextprotocol/ server-gdrive	npm	D	67	0	2
@modelcontextprotocol/ server-github	npm	D	46	0	2
@modelcontextprotocol/ server-gitlab	npm	D	46	0	2
@modelcontextprotocol/ server-google-maps	npm	D	44	0	2
@modelcontextprotocol/ server-memory	npm	A	4	0	0
@modelcontextprotocol/ server-postgres	npm	D	29	0	2
@modelcontextprotocol/ server-puppeteer	npm	D	117	0	2
@modelcontextprotocol/ server-redis	npm	D	109	0	2
@modelcontextprotocol/ server-sequential-thinking	npm	A	21	0	0
@modelcontextprotocol/ server-slack	npm	D	15	0	2
@neondatabase/ mcp-server-neon	npm	D	437	0	2
@newrelic/ preflight	npm	A	—	0	0
@notionhq/ notion-mcp-server	npm	A	178	0	1
@perplexity-ai/ mcp-server	npm	A	—	0	0
@piotr-agier/ google-drive-mcp	npm	A	—	0	0
@playwright/ mcp	npm	A	3	0	0
@postman/ postman-mcp-server	npm	B	—	0	1
@putervision/ state-memory-mcp	npm	A	—	0	0
@putervision/ vision-memory-mcp	npm	A	—	0	0
@qase/ mcp-server	npm	A	—	0	0
@respira/ wordpress-mcp-server	npm	A	—	0	1
@rsdoctor/ mcp-server	npm	A	—	0	0
@sap-ux/ fiori-mcp-server	npm	A	—	0	0
@sap/ mdk-mcp-server	npm	B	—	0	1
@sentry/ mcp-server	npm	A	154	0	1
@smartbear/ mcp	npm	A	—	0	1
@softeria/ ms-365-mcp-server	npm	A	—	0	0
@storybook/ addon-mcp	npm	A	—	0	0
@stripe/ mcp	npm	A	97	0	0
@supabase/ mcp-server-supabase	npm	A	17	0	0
@sveltejs/ mcp	npm	A	—	0	0
@swmansion/ argent	npm	A	—	0	0
@taazkareem/ clickup-mcp-server	npm	A	—	0	0
@tomd4vs/ prumo	npm	A	—	0	0
@trusty-squire/ mcp	npm	A	—	0	0
@ui5/ mcp-server	npm	A	—	0	0
@unleash/ mcp	npm	A	—	0	0
@upstash/ context7-mcp	npm	A	104	0	0
@upstash/ mcp-server	npm	A	—	0	0
@variflight-ai/ variflight-mcp	npm	A	—	0	1
@wdio/ mcp	npm	A	—	0	1
@wonderwhy-er/ desktop-commander	npm	B	650	0	1
@yawlabs/ ctxlint	npm	A	—	0	0
@yawlabs/ postgres-mcp	npm	A	—	0	0
@zereight/ mcp-gitlab	npm	A	—	0	0
adscapi	npm	A	—	0	0
agent-comms	npm	A	—	0	0
agent-device	npm	A	—	0	0
agent-interop-runtime	npm	A	—	0	0
agentic-hil	PyPI	A	—	0	0
agentphone-mcp	npm	A	—	0	0
ai-appsec	npm	A	—	0	0
airtable-mcp-server	npm	A	—	0	0
aiterm-mcp	npm	A	—	0	0
apiguru-mcp	npm	A	—	0	0
apiguru-mcp	PyPI	A	—	0	0
appium-mcp	npm	A	—	0	0
arxiv-mcp-server	PyPI	A	—	0	0
avrotize	PyPI	A	—	0	1
b280-olca-mcp	PyPI	A	—	0	0
basic-memory	PyPI	A	—	0	0
bernstein	PyPI	A	—	0	0
bettermemory	PyPI	A	—	0	0
bitbucket-mcp	npm	A	—	0	0
brains-mcp	npm	A	—	0	0
browser-devtools-mcp	npm	B	—	0	1
bykaranteli-mcp	npm	A	—	0	0
chrome-devtools-mcp	npm	A	—	0	0
claude-flow	npm	A	—	0	0
clauder-mcp	PyPI	A	—	0	1
codebase-memory-mcp	npm	B	—	0	1
comfyui-mcp	npm	A	—	0	0
cortex-local-rag	PyPI	A	—	0	0
crawlforge-mcp-server	npm	B	—	0	1
crypto-quant-signal-mcp	npm	A	—	0	0
deep-agentic-core-mcp	PyPI	A	—	0	0
delimit-cli	npm	B	—	0	1
docling-mcp	PyPI	A	—	0	0
dynoxide	npm	A	—	0	0
edgartools	PyPI	A	—	0	0
elasticsearch-mcp-server	PyPI	A	—	0	1
emailmd	npm	A	—	0	0
exa-mcp-server	npm	A	133	0	0
exomem	PyPI	A	—	0	0
falcon-mcp	PyPI	A	—	0	1
figma-developer-mcp	npm	A	136	0	0
firebase-tools	npm	A	—	0	0
firecrawl-mcp	npm	A	192	0	0
genexus-mcp	npm	B	—	0	1
githits	npm	A	—	0	0
graphlit-mcp-server	npm	A	555	0	1
ha-mcp	PyPI	A	—	0	0
hermoso	npm	A	—	0	0
hevy-mcp	npm	A	—	0	0
heylead	PyPI	A	—	0	0
hol-guard	PyPI	A	—	0	0
humanizer-ru	PyPI	A	—	0	0
igniteui-theming	npm	A	—	0	0
jcodemunch-mcp	PyPI	A	—	0	0
kepta-mcp	npm	A	—	0	0
kicad-mcp-pro	PyPI	A	—	0	0
kubernetes-mcp-server	npm	A	—	0	0
kubernetes-mcp-server	PyPI	A	—	0	0
lineai-mcp-server	PyPI	A	—	0	0
llm-sandbox	PyPI	A	—	0	0
local-mcp	npm	B	—	0	1
loki-mode	npm	B	—	0	1
mbox-mcp	npm	A	—	0	0
mcp-accessibility-scanner	npm	A	—	0	0
mcp-adr-analysis-server	npm	A	—	0	0
mcp-clickhouse	PyPI	A	—	0	1
mcp-einvoicing-core	PyPI	A	—	0	1
mcp-image	npm	A	—	0	0
mcp-local-rag	npm	A	—	0	0
mcp-neo4j-data-modeling	PyPI	A	—	0	1
mcp-neo4j-memory	PyPI	A	—	0	1
mcp-proxy-for-aws	PyPI	A	—	0	1
mcp-remote	npm	A	81	0	0
mcp-searxng	npm	A	—	0	0
mcp-server-fetch	PyPI	A	46	0	0
mcp-server-git	PyPI	A	32	0	0
mcp-server-kubernetes	npm	A	407	0	0
mcp-server-motherduck	PyPI	A	—	0	1
mcp-server-sentry	PyPI	A	29	0	2
mcp-server-sqlite	PyPI	A	37	0	1
mcp-server-time	PyPI	A	31	0	0
mcp-tenant-isolation	npm	A	—	0	0
mdcx	PyPI	A	—	0	0
memorix	npm	A	—	0	0
mongodb-mcp-server	npm	A	433	0	0
msmcp-azure	PyPI	A	—	0	0
nanobanana-mcp-server	PyPI	A	—	0	0
next-devtools-mcp	npm	A	—	0	0
nx-mcp	npm	A	—	0	0
obsidian-mcp-server	npm	A	—	0	0
oxylabs-mcp	PyPI	A	—	0	0
pagerduty-mcp	PyPI	A	—	0	1
paperbanana	PyPI	A	—	0	0
pm-claude-skills	npm	B	—	0	1
praisonai	PyPI	A	—	0	0
projectpulse-mcp	npm	A	—	0	0
redis-mcp-server	PyPI	A	—	0	0
repowise	PyPI	A	—	0	0
rtfm-ai	PyPI	A	—	0	0
run402-mcp	npm	A	—	0	0
ruv-swarm	npm	A	—	0	0
safari-mcp	npm	B	—	0	1
samarth-gtm-mcp	npm	A	—	0	0
sapiens-mcp	npm	A	—	0	0
sbuilder-mcp	npm	A	—	0	0
scrapling	PyPI	A	—	0	0
screenpipe-mcp	npm	A	—	0	1
semiotic	npm	A	—	0	0
serena-agent	PyPI	A	—	0	0
sigrank	npm	A	—	0	0
skylos	PyPI	A	—	0	0
sling	PyPI	A	—	0	0
snyk	npm	B	—	0	1
socraticode	npm	A	—	0	0
ssh-mcp	npm	A	—	0	0
tavily-mcp	npm	A	126	0	0
telnyx	npm	A	—	0	0
tokportal-mcp	npm	A	—	0	0
tooluniverse	PyPI	A	—	0	0
trace-mcp	npm	B	—	0	1
uisight	npm	A	—	0	0
unifi-access-mcp	PyPI	A	—	0	1
unifi-network-mcp	PyPI	A	—	0	1
unifi-protect-mcp	PyPI	A	—	0	1
verdict-qa-mcp	PyPI	A	—	0	0
webcrypt	npm	A	—	0	0
windows-mcp	PyPI	A	—	0	0
workspace-mcp	PyPI	A	—	0	0
xcodebuildmcp	npm	A	—	0	0
yandex-tracker-mcp	PyPI	A	—	0	1
yaver-cli	npm	B	—	0	1
zoo_mcp	PyPI	A	—	0	0

▲ the package count understates what you install — most of what resolves is prebuilt binaries. Grade ? means the registry lookup failed, so nothing was assessed.
Grades derive from npm/PyPI metadata published by the package owners and from public security advisories (OSV/GHSA) — a deprecation notice or a filed CVE, not our own judgement of the code. Grades scanned 2026-10-22 · counts resolved 2026-10-21. A package fixed after that date still shows its earlier grade.
Maintainer and think a grade here is wrong or stale? Get in touch — corrections are welcome.