Arsenal

MCP Server Directory

A curated registry of Model Context Protocol servers, each with an automated security grade from our tool-surface scanner.

Matches2

Learn

MCP security explainers

Context for the grades below — how inspection, tool poisoning, and the grade-vs-gate split work. Directory letters are Andrax scanner grades (mcpgrade-1.4.0), not Guard runtime scores.

Enforce with Guard

Soft CTA: a grade finds risk on a snapshot; Guard enforces allow/deny/audit on live MCP traffic (mcpgrade-2.0.0). Do not equate the two scores.

Guard vs grade-only MCP scannersWhen a letter grade is not enough — grade finds risk; runtime enforces policy.Read article

2 matches clearDork reference →

GradesA0B0

Add a server to the directory

Run an MCP server? Paste its remote endpoint — we'll scan it (read-only) and publish a free, reproducible security grade. Genuine MCP servers get listed instantly.

Introducing MCPGrade

What mcpgrade-1.4.0 checks and how Andrax letter grades are produced.

Read article

How to inspect an MCP serverRead-only inspection before you connect an agent.Read article

MCP tool poisoning explainedHow poisoned tool descriptions hijack agents — and how grades catch them.Read article

C

0

D0

F2

Unrated0

agent-mcp

Fgrade

MCP server for Dr. Maggie Geller's optometry practice providing information and appointment booking tools.

Streamable HTTP

agent-mcp

Fgrade

MCP server for Trust Boundary Systems providing information and contact tools for their blockchain, AI, and cryptography advisory services.

Streamable HTTP