Mcpgrade MCP server

by mcpgrade.dev·dev.mcpgrade/mcp·v0.1.1

Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

C68/100grade C

What users say

No reviews yet

Safety scan

C68/100

Adoption

New

22 downloads/wk

Reviews

Nobody has reviewed Mcpgrade yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_mcp_server
Look up the mcpgrade security grade (A–F) for a specific MCP server by name.
search_mcp_servers
Search graded MCP servers by free-text query, category, and/or minimum grade.

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings

Code scan2 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancerepository not readable: repo not found3/15
Maintainer identityverified namespace with website, no repo4/10

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 68/100; higher than 30% of 915 Security servers
Tools: 2; the typical Security server has 6
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 22; more than 7% of 248 Security servers with a package

What its tools let an agent do: 2 read

Runs npx -y @mcpgrade/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @mcpgrade/mcp

Is Mcpgrade MCP server safe?: With care: it is graded C, so read the findings first (68/100). Read the Mcpgrade safety report
How do I install Mcpgrade?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mcpgrade need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Mcpgrade maintained?: The latest release is v0.1.1.
What can I use instead of Mcpgrade?: Servers from other publishers that do the same job: crosscheck MCP server, Security MCP server and Fedramp Oscal Ssp Lint MCP server.
How does Mcpgrade compare with other Security MCP servers?: safety score 68/100 (higher than 30% of 915 Security servers); tools 2 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Same job from other publishers: the closest match first, then the best rated.

crosscheck
Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
not reviewed
Growing
A
Security MCP
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
not reviewed
Growing
A
Fedramp Oscal Ssp Lint
16 checks on a system-security-plan JSON, in your editor, before a validator returns the package
More from jmshinhwa →
not reviewed
Growing
A
Prodcheck
4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
not reviewed
Growing
A
prodlint
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
not reviewed
Growing
A