Is MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highRemote endpoint did not respond — Streamable HTTP error: Error POSTing to endpoint: {"error":"hosted_mcp_retired","message":"The subsidized hosted MCP service has been retired. Use the paid API at https://api.clawfetch.ai or run @claw
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
1 high
- Code scan2 source files scanned25/25
- Live reliabilityremote unreachable: Streamable HTTP error: Error POSTing to endpoint: {"error":"hosted_mcp_retired","message":"The subsidized hosted MCP service has been retired. Use the paid API at https://api.clawfetch.ai or run @claw0/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highRemote endpoint did not respond
reliability.unreachableStreamable HTTP error: Error POSTing to endpoint: {"error":"hosted_mcp_retired","message":"The subsidized hosted MCP service has been retired. Use the paid API at https://api.clawfetch.ai or run @claw
Overall 62/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what MCP does
- BrightdataBright Data's Web MCP server enabling AI agents to search, extract & navigate the webnot reviewedEstablishedB
- PyreCrawlWeb scraping + research toolkit for AI agents: scrape, crawl, monitor URLs with anti-bot bypass.not reviewedGrowingA
- Video ExtractDownload any video from a URL, or get its transcript and key frames. All local, no API keys.not reviewedGrowingA