Redthread MCP server
online · 100% uptimeby redthreadsec.com·
com.redthreadsec/redthread·v0.7.469Attack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers.
B77/100grade B
Adoption
New
Little public usage data yet
Reviews
Write oneNobody has reviewed Redthread yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Redthread tools
Tool list not cached yet. `describe` through the gateway fetches it live.
Public scan report
scanner v0.1.10 · 2026-10-09 · same rubric, same numbers if you re-run it
1 low
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 260ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenanceno repository listed3/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
Findings (1)
- lowNo source repository listed
maint.no-repo
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
How Redthread compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 55% of 915 Security servers
- Uptime
- 100%
- of our recent checks; the typical remote Security server answers 100%
- Response time
- 289 ms
- faster than 40% of 547 Security servers
Install Redthread in Claude Code, Cursor or VS Code
claude mcp add --transport http redthread https://app.redthreadsec.com/mcp
Redthread: common questions
- Is Redthread MCP server safe?
- Mostly: it is graded B (77/100). Read the Redthread safety report
- How do I install Redthread?
- It runs remotely at app.redthreadsec.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Redthread need an API key?
- No key to paste: it signs you in with OAuth when your client connects.
- Is Redthread maintained?
- The latest release is v0.7.469.
- Is Redthread up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Redthread?
- Servers from other publishers that do the same job: Sn1per MCP Server: pentest, recon and attack surface scanning, Dep Scope MCP server and Keyspoor MCP server.
- How does Redthread compare with other Security MCP servers?
- safety score 77/100 (higher than 55% of 915 Security servers); uptime 100% (of our recent checks; the typical remote Security server answers 100%); response time 289 ms (faster than 40% of 547 Security servers). Full comparison.
Alternatives to Redthread
Same job from other publishers: the closest match first, then the best rated.
Sn1per MCP Server: pentest, recon and attack surface scanningRun scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.not reviewedGrowingA- Dep ScopeSymbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.not reviewedGrowingA
- KeyspoorOffline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.not reviewedGrowingA
- PyMemoryEditorRead, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.not reviewedEstablishedA
- Autopilot JobhuntAgentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.not reviewedGrowingA