A

@modelcontextprotocol/server-everything

npm · v2026.7.4 · 65,608 dl/week · 106 packages installed

MCP server that exercises all the features of the MCP protocol

Installing this server brings 106 third-party packages inside your agent's trust boundary (5 direct). This is attack surface, not a vulnerability count — it does not affect the grade above.

Findings (0)

✓ No registry-level findings. (This is a metadata scan, not a code audit.)

Embed this badge

MCP security grade A 
[![MCP security](https://vulnrable.com/api/mcpbadge?pkg=%40modelcontextprotocol%2Fserver-everything&eco=npm)](https://vulnrable.com/mcp/modelcontextprotocol--server-everything/)
Source repo Registry page Check your own config →

Automated registry-metadata scan; not a code audit. Rescanned on each site deploy.