Arsenal

MCP Server Directory

A curated registry of Model Context Protocol servers, each with an automated security grade from our tool-surface scanner.

Matches2

Learn

MCP security explainers

Context for the grades below — how inspection, tool poisoning, and the grade-vs-gate split work. Directory letters are Andrax scanner grades (mcpgrade-1.4.0), not Guard runtime scores.

Enforce with Guard

Soft CTA: a grade finds risk on a snapshot; Guard enforces allow/deny/audit on live MCP traffic (mcpgrade-2.0.0). Do not equate the two scores.

Guard vs grade-only MCP scannersWhen a letter grade is not enough — grade finds risk; runtime enforces policy.Read article

2 matches clearDork reference →

GradesA0B0

Add a server to the directory

Run an MCP server? Paste its remote endpoint — we'll scan it (read-only) and publish a free, reproducible security grade. Genuine MCP servers get listed instantly.

Introducing MCPGrade

What mcpgrade-1.4.0 checks and how Andrax letter grades are produced.

Read article

How to inspect an MCP serverRead-only inspection before you connect an agent.Read article

MCP tool poisoning explainedHow poisoned tool descriptions hijack agents — and how grades catch them.Read article

C

0

D0

F2

Unrated0

seo-audit-mcp

Fgrade

Audits websites across 15 SEO checks including Core Web Vitals, E-E-A-T signals, structured data, and AI search visibility.

Streamable HTTP

x402-data-gateway

Fgrade

Pay-per-call USDC tools via x402/Base: company and wallet enrichment, web content reading, and repository scanning.

Streamable HTTP