Mcpcheck MCP server
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Little public usage data yet
Reviews
Write oneNobody has reviewed Mcpcheck yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mcpcheck tools (2)
write = sends, deletes, buys or postscheck_mcp_trustFreeCheck if an MCP server is safe to install: returns a trust score (0-100, grade A-F). Accepts a registry name (io.github.x/y), a GitHub repo (owner/repo), or a remote MCP URL. For remote servers it live-connects and analyzes the actual exposed tools for tool-poisoning + capabilities, and checks the backing repo (maintenance, license, security policy, auth). Call BEFORE installing or recommending any MCP server.
scan_mcp_serverFreeScan and inspect an MCP server for security issues before connecting it: live tool-poisoning analysis, exposed-tool inventory + capabilities, TLS, and repo trust signals. Same engine as check_mcp_trust. Accepts a registry name, GitHub repo, or remote MCP URL.
Public scan report
scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 598ms20/20
- Tool poisoning2 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Install directly
claude mcp add --transport http mcpcheck https://mcpcheck.netlify.app/mcp
Mcpcheck: common questions
- Is Mcpcheck MCP server safe?
- With care: it is graded C, so read the findings first (67/100). Read the Mcpcheck safety report
- How do I install Mcpcheck?
- It runs remotely at mcpcheck.netlify.app. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Mcpcheck need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Mcpcheck maintained?
- The latest release is v1.0.1.
- Is Mcpcheck up?
- 100% of our last 7 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Mcpcheck?
- Servers from other publishers that do the same job: Webanalyzer MCP server, ScanLabsAI Security Scanner MCP server and Fedramp Oscal Ssp Lint MCP server. Compare all Mcpcheck alternatives.
Alternatives to Mcpcheck
Same job from other publishers: the closest match first, then the best rated.
- WebanalyzerFree website analyzer: score any public URL 0-100 across 8 quality dimensions. No auth.not reviewedGrowingA
ScanLabsAI Security ScannerScan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixesnot reviewedNewB- Fedramp Oscal Ssp Lint16 checks on a system-security-plan JSON, in your editor, before a validator returns the packagenot reviewedNewA
- Passiv Web ToolsFree web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.not reviewedNewB
StackShieldExternal security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.not reviewedNewB