MCP.Market

Canary MCP server

by mindstone·io.github.mindstone/mcp-server-canary·v0.0.4·14 stars

Mindstone-internal release-pipeline test connector; not for use. Single ping tool; no auth.

A94/100grade A
What users say
No reviews yet
Be the first
Safety scan
A94/100

full report

Adoption
Growing

14 stars62 downloads/wk

Reviews

Write one

Nobody has reviewed Canary yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Canary tools (1)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • ping

    Echo a message back wrapped as "pong v3: <message>". Used to verify the canary connector is reachable and the release pipeline produced a working build.

Public scan report

scanner v0.1.10 · 2026-11-09 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Canary compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
94/100
higher than 97% of 917 Security servers
Tools
1
the typical Security server has 10
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
14
more than 91% of 589 Security servers
Downloads a week
62
more than 27% of 386 Security servers with a package

What its tools let an agent do: 1 read

Install Canary in Claude Code, Cursor or VS Code

Runs npx -y @mindstone/mcp-server-canary on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server-canary -- npx -y @mindstone/mcp-server-canary
Add to Cursor

What the publisher says

From the Canary repository's README, as published. We do not edit it. Read it on GitHub

mcp-servers

Source-available MCP servers by Mindstone. Works with any MCP host — Claude Desktop, Cursor, Rebel, and others.

Browse all 35 connectors with their version, auth model, and tool count at the catalogue site (regenerated from each connector's STATUS.json on every push).

Connectors

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Canary: common questions

Is Canary MCP server safe?
Yes, by our scan: it is graded A (94/100). Read the Canary safety report
How do I install Canary?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Canary need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Canary maintained?
The last commit was 7 days ago (2026-11-08). The latest release is v0.0.4.
What can I use instead of Canary?
Servers from other publishers that do the same job: Servicenow AI MCP server, Rede MCP server and Imf Portwatch MCP server.
How does Canary compare with other Security MCP servers?
safety score 94/100 (higher than 97% of 917 Security servers); tools 1 (the typical Security server has 10); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Canary

Same job from other publishers: the closest match first, then the best rated.

  • Servicenow AI
    ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.
    C
  • Rede
    MCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokens
    B
  • Imf Portwatch
    IMF PortWatch MCP — global maritime trade & chokepoint signals (free, no auth)
    B
  • Raziel
    MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
    A
  • Healthclaw Guardrails
    Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
    A

More from mindstone →