Is Finch MCP server safe?
Not recommended.
Hidden from default browsing. Significant findings or unreachable.
What to know before installing
- highRemote endpoint did not respond — AbortError: This operation was aborted
- highShell command built from a string (injection risk)
How Finch compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 49/100
- higher than 9% of 48,114 servers
- Uptime
- 0%
- of our recent checks; the typical remote server answers 100%
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
2 high
- Code scan60 source files scanned13/25
- Live reliabilityremote unreachable: AbortError: This operation was aborted0/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityAPI key sent as a header8/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (2)
- highRemote endpoint did not respond
reliability.unreachableAbortError: This operation was aborted
- highShell command built from a string (injection risk)
exec.shell-concatdist/cli.js: … try { child_process.execSync(`schtasks /Create /TN "${taskName}" /TR "${invocation}" /SC MINUTE /MO 15 /F`, { st…
Overall 49/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Safer options for the same job
KnowlPersistent memory for AI agents, for code, research and everyday life. Stale facts retire.not reviewedEstablishedA- Token SaviorStructural codebase MCP server with persistent memory: navigate by symbol, recall across sessions.not reviewedEstablishedA
State Memory MCPPersistent workflow graph server tracking tasks, decisions, spatial entities, and blockers.not reviewedEstablishedA
