MCP.Market

MCP Queen MCP server

online · 100% uptime
by mcpqueen.com·com.mcpqueen/registry·v0.3.0
No reviews yet

The evidence layer for MCP: live operational grades plus Trust Receipts for every registry server.

B83/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed MCP Queen yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP Queen tools (7, 1 write)

write = sends, deletes, buys or posts
  • get_server_gradeFree

    Get the full grade and verbatim probe evidence for one MCP server, by its official registry name (e.g. 'com.healthai/radar').

  • get_trust_receiptFree

    Get one MCP server's complete evidence receipt: operational grade, deterministic security/data-integrity/citation/claim observations, and reviewed real-usage field reports. Missing observations are explicitly unaudited, never treated as a pass.

  • list_gradesFree

    List the top graded MCP servers from the mcpqueen registry (deterministic probe grades with evidence). Returns grade, score 0-100, latency, tool count and auth state per server.

  • search_serversFree

    Search the MCP evidence registry using a natural multi-word task (e.g. 'reliable no-auth drug interaction server with citations'). Tokenizes and expands common synonyms, ranks metadata plus observed tool descriptions, and supports operational-grade/auth/latency/category filters. Use get_trust_receipt or search_trust_evidence for security, data, citation, claim, and response evidence.

  • search_toolsFree

    Search across the actual tools that graded MCP servers expose (their tool names and descriptions, captured live from tools/list) — not just server metadata. Use this when you need a specific capability or data type, e.g. 'get weather', 'query postgres', 'device recall', 'FDA 510k'. Returns the matching tools with the server that offers each, its grade, and the remote endpoint so you can connect directly.

  • search_trust_evidenceFree

    Search published MCP trust evidence and reviewed real-usage field reports. Use for questions such as which servers expose citations, have access caveats, make unverifiable corpus claims, or show security concerns. Returns verbatim observations with dates and source type, not a synthetic trust score.

  • submit_feedbackwrite actionFree

    Submit a field report about an MCP server you have actually used (what worked, what failed, surprising behavior). Reports are quarantined for human review and never auto-published.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 443ms20/20
  • Tool poisoning7 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 11 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MCP Queen compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
Tools
7
the typical server has 7
Tools that change things
14%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
82 ms
faster than 87% of 30,031 servers

What its tools let an agent do: 6 read · 1 change

Install MCP Queen in Claude Code, Cursor or VS Code

claude mcp add --transport http registry https://mcpqueen.com/mcp
Add to Cursor

What the publisher says

From the MCP Queen repository's README, as published. We do not edit it. Read it on GitHub

MCP Queen

MCP Queen is a public discovery and evidence service for Model Context Protocol servers. It publishes dated operational observations, tool metadata, and separate Trust Receipts so developers and agents can inspect evidence before deciding what to connect.

An MCP Queen operational grade is not a security, privacy, data-quality, or compliance certification. Missing evidence is unaudited, not safe.

Use the hosted endpoint

The public Streamable HTTP endpoint requires no account for rate-limited evaluation:

https://mcpqueen.com/mcp

It exposes six read-only discovery/evidence tools and one additive feedback tool:

  • search_servers
  • search_tools
  • list_grades
  • getservergrade
  • gettrustreceipt
  • searchtrustevidence
  • submit_feedback — writes only to a quarantined review queue

For human-readable setup and current service limits, use mcpqueen.com/connect.

Claude Code

claude mcp add --transport http mcpqueen https://mcpqueen.com/mcp

Direct protocol examples

The model-free examples under examples/clients call the hosted endpoint directly:

node examples/clients/node-http.mjs "GitHub issue triage"

The Python version uses the official MCP SDK. Additional examples show bounded integration with LangChain, LlamaIndex, Cloudflare Agents, Hugging Face, and the OpenAI Responses API. Agent examples allowlist only the six read-only tools; submit_feedback is excluded from automatic model access.

Optional local stdio bridge

This repository contains a small zero-dependency stdio bridge for clients that cannot connect to a remote Streamable HTTP endpoint directly. The bridge does not contain MCP Queen's hosted implementation or evidence corpus; it forwards JSON-RPC messages to https://mcpqueen.com/mcp.

git clone https://github.com/mcpqueen/mcpqueen.git
cd mcpqueen
npm ci
npm start

To point the bridge at another compatible endpoint during local testing, set MCPQUEENMCPURL in the process environment.

Docker is also supported:

docker build -t mcpqueen-bridge .
docker run --rm -i mcpqueen-bridge

What this public repository contains

docs/architecture.md

  • registry metadata: server.json and glama.json
  • the hosted-endpoint stdio bridge: server.mjs
  • model-free and framework examples: examples
  • public architecture and trust boundaries:
  • deterministic tests and read-only CI

The production Worker, deployment configuration, evidence database, submission packages, operational records, and private source history are not part of this public developer surface. This repository is not a production deployment source.

Verify locally

npm ci
npm test

The tests exercise the bridge against a local mock endpoint and verify that public documentation and package scripts reference files that are actually in this repository.

License and support

Code in this repository is available under the MIT License. Product documentation, privacy, terms, and support are available from mcpqueen.com.

Nothing above is checked by us. What we check is on the safety report.

MCP Queen: common questions

Is MCP Queen MCP server safe?
Mostly: it is graded B (83/100). Read the MCP Queen safety report
How do I install MCP Queen?
It runs remotely at mcpqueen.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does MCP Queen need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MCP Queen maintained?
The last commit was 52 days ago (2026-09-13). The latest release is v0.3.0.
Is MCP Queen up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of MCP Queen?
Servers from other publishers that do the same job: Bernstein MCP server.
How does MCP Queen compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); tools 7 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MCP Queen

Same job from other publishers: the closest match first, then the best rated.

  • Bernstein
    The open-source governance layer for AI agents. Byte-identical run receipts, 40+ adapters, air-gap.
    C