Is Sealgate MCP server safe?

Probably. Read the findings first.

C55/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing

highRemote endpoint did not respond — Streamable HTTP error: Error POSTing to endpoint: {"detail":"Invalid API key"}

How Sealgate compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

scanner v0.1.10 · 2026-11-02 · same rubric, same numbers if you re-run it

1 high1 medium

Code scan2 source files scanned20/25
Live reliabilityremote unreachable: Streamable HTTP error: Error POSTing to endpoint: {"detail":"Invalid API key"}0/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 58 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

highRemote endpoint did not respondreliability.unreachable
Streamable HTTP error: Error POSTing to endpoint: {"detail":"Invalid API key"}

mediumeval / new Function usedexec.eval

dist/index.js: …ludes("Cloudflare"))return!1;try{return new Function(""),!0}catch($){return!1}});function cv(…

Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Watch Skill
Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
not reviewed
Established
B
OpenWorkProof
Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
not reviewed
Established
A
freellmpool
OpenAI-compatible MCP gateway cataloging 22 LLM providers, with routing, failover, and tools.
not reviewed
Established
A