Arsenal

MCP Server Directory

A curated registry of Model Context Protocol servers, each with an automated security grade from our tool-surface scanner.

Matches2

Learn

MCP security explainers

Context for the grades below — how inspection, tool poisoning, and the grade-vs-gate split work. Directory letters are Andrax scanner grades (mcpgrade-1.4.0), not Guard runtime scores.

Enforce with Guard

Soft CTA: a grade finds risk on a snapshot; Guard enforces allow/deny/audit on live MCP traffic (mcpgrade-2.0.0). Do not equate the two scores.

Guard vs grade-only MCP scannersWhen a letter grade is not enough — grade finds risk; runtime enforces policy.Read article

2 matches clearDork reference →

Grades

Add a server to the directory

Run an MCP server? Paste its remote endpoint — we'll scan it (read-only) and publish a free, reproducible security grade. Genuine MCP servers get listed instantly.

Introducing MCPGrade

What mcpgrade-1.4.0 checks and how Andrax letter grades are produced.

Read article

How to inspect an MCP serverRead-only inspection before you connect an agent.Read article

MCP tool poisoning explainedHow poisoned tool descriptions hijack agents — and how grades catch them.Read article

A0

B0

C1

D0

F1

Unrated0

AWSKnowledgeMCP

Cgrade

AWS's official fully managed remote server that provides real-time access to comprehensive AWS documentation, API references, troubleshooting guides, and architectural guidance across multiple knowledge sources including What's New posts, Builder Center content, blog posts, and Well-Architected frameworks for building applications, managing infrastructure, and learning AWS services through natural language queries.

Streamable HTTP

AWSMCP

Fgrade

Fully managed remote service providing access to AWS documentation and over 15,000 AWS APIs

Streamable HTTP