Arsenal

MCP Server Directory

A curated registry of Model Context Protocol servers, each with an automated security grade from our tool-surface scanner.

Matches4

Learn

MCP security explainers

Context for the grades below — how inspection, tool poisoning, and the grade-vs-gate split work. Directory letters are Andrax scanner grades (mcpgrade-1.4.0), not Guard runtime scores.

Enforce with Guard

Soft CTA: a grade finds risk on a snapshot; Guard enforces allow/deny/audit on live MCP traffic (mcpgrade-2.0.0). Do not equate the two scores.

Guard vs grade-only MCP scannersWhen a letter grade is not enough — grade finds risk; runtime enforces policy.Read article

4 matches clearDork reference →

Add a server to the directory

Run an MCP server? Paste its remote endpoint — we'll scan it (read-only) and publish a free, reproducible security grade. Genuine MCP servers get listed instantly.

Introducing MCPGrade

What mcpgrade-1.4.0 checks and how Andrax letter grades are produced.

Read article

How to inspect an MCP serverRead-only inspection before you connect an agent.Read article

MCP tool poisoning explainedHow poisoned tool descriptions hijack agents — and how grades catch them.Read article

UA

1

GradesA0B0C4D0F0Unrated0

currency-converter

C+grade

Converts between fiat and cryptocurrency pairs using ECB and CoinGecko exchange rates.

Streamable HTTP

finance_fintech_mcp

C+grade

Real-time financial and fintech data integration for AI agents via hosted MCP server.

Streamable HTTP

PriceFeed

C+grade

Provides real-time and historical crypto and fiat exchange rates aggregated from multiple sources.

Streamable HTTP

paralelo-bo

C-grade

Real-time and historical Bolivia parallel-market USD/BOB exchange rates, P2P-aggregated and free under CC-BY 4.0.

Streamable HTTP