Trust scores
Instant security scores for any npm MCP package
CVE posture, supply-chain signals, and plain-English guidance. Optional deep scan probes the live MCP server. Watch walkthrough → · Am I exposed to the Mastra attack?
1 · Look upType an npm package name (e.g. @playwright/mcp). Static analysis runs automatically.
2 · Deep scanOptionally probe the live MCP server for a richer score with runtime signals.
3 · EmbedCopy badge markdown from the score page into your README.
Recently scored packages
200 packages@mcp-use/cli@mcp-use/inspectorpolaris-mcp-serveraidevopskordocagentdb@claude-flow/cli@microsoft/workiq@vantasdk/vanta-mcp-server@azure/mcp-darwin-arm64@slashfi/agents-sdk@statescry-tool/cliborgmcpai@homespunapps/mcp@payloadcms/plugin-mcpmcp-use@eui/mcpfirecrawl-mcpfetcher-mcpsamarth-gtm-mcpmcp-mermaidclaude-flowskillfishveryfront@bike4mind/cli@testsprite/testsprite-mcp@invarn/clifallowpi-mcp-adapter@drawio/mcppage-agent-sdkproject-knowledge@mcp-b/webmcp-ts-sdk@smartbear/mcpmcp-client-capabilitiesmcp-from-openapi@azure/mcp-win32-x64comfyui-mcp@oh-my-pi/pi-mnemopinpm-deprecated-check@benborla29/mcp-server-mysql@sellable/installalibabacloud-devops-mcp-server@z_ai/mcp-server@upstash/context7-mcp@modelcontextprotocol/hono@ai-sdk/mcp@tangle-network/agent-appmcp-evalsagent-afkplaywright-mcp@gleanwork/mcp-config-schemacybaraeve@stacksjs/ai@azure/mcp-linux-x64@sellable/mcp@piotr-agier/google-drive-mcp@azure/mcp-template-darwin-arm64@backstage-community/plugin-acr@backstage-community/plugin-manage-backend@aztec/mcp-server@azure/container-registry@aziron/atlas@backlogit/backlogit-mcp@typia/mcp@axorum/mcp@azure-devops/mcp@sequenzy/mcpmetaharnessai@backenly/mcp-server@axonity-ai/mcp@axon-trading/mcp@back4app/mcp-server-back4app@ayaka209/claude-context-mcp@axionquant/mcp@ayushmudgal94/twilio-mcp@azinod/cursor-cloud-agent-mcp@axint/compiler@axtary/policy@ax-crew/chartjs-mcp-server@axon-trading/sdk@axlabs/banana-mcp-server@ax-llm/ax-tools@azure/mcp-template-win32-arm64@ax-ado-mcp/mcp-server-azure-devops-enhanced@aws/mcp-amqp-transport@aws-sdk/client-agent-registry-control@awesomate/hosting-mcp@awsljx/pi-mcp@aws/run-mcp-servers-with-aws-lambda@avuke/jarvis-mcp@avm-ai/avm-mcp@awesome-ai/elasticsearch-mcp@averra/extract-mcp@aws-sdk/client-signer@avidian/mcp-slack@avidian/mcp-openapi@azure/schema-registry-avro@avidian/mcp-jira@avclabs.ai/enhance-mcp@avatar-state-machine-interface/runtime@avasis-ai/synthcode@automattic/mcp-server-gravatar@autoza/mcp-server@avenia-io/mcp-client@autopayos/mcp-server@automattic/mcp-context-a8c@autono/buttons@automate-io/api-testing-mcp@azure/mcp-template@autonomos/core@autonomad1/computeback-mcp@automate-army/google-calendar-mcp@azure/arm-containerregistry@ayushmudgal94/openapi-mcp-server@augustdigital/mcp@aykahshi/copilot-mcp-server@authora/agent-audit@authensor/mcp-server@axon-trading/cli@ayatec/ai-gateway-mcp-server@ayepi/mcp@auth0/auth0-mcp-server@axxify/mcp@axtary/mcp@automatalabs/mcp-client-manager@axtary/actionpass@aurorasendcloud/mcp-server@autocut-cli/llm-wiki@axolot-ai/mcp-server@augno/sdk-mcp@augustalex/backlog@axiorank/mcpaudit@axaraaudit/mcp-server@axiorank/mcp-gateway@audiodn/mcp@aws/nx-plugin-mcp@attention-matters/cli@aws-sdk/client-ecr-public@aws-sdk/client-ecr@autodev/worker-protobuf@attribloom/mcp@avodado/mcp@avinsonmassif/mcp-evernote@attackforge/mcp-server@auth/agent-cli@aushin19/cve-mcp@avallon-labs/mcp@aurracloud/mcp-cli@atrium-hermes/mcp-server@augno/sdk@attested-intelligence/aga-mcp-server@avala-ai/mcp-server@auditae/mcp@atrib/verify-mcp@avakit/mcp@audiolabtools/mcp-server@atyaga/mcp-mattermost@atrib/sdk@attrkit/mcp@atlassian/mcp-compressor@atrib/annotate@atrib/trace@atrib/summarize@atomlong/mcp-searxng@autopilot715/servicenow-mcp-server@atrib/revise@atrib/recall@atrib/mcp-wrap@atlisp/mcp@atomicmail/mcp-gh-pages@automattic/simplenote-mcp@atrib/mcp@atoms-tech/atoms-mcp@atom8n/n8n-atom-cli@automattic/mcp-remote@atrib/emit@atom8n/inspector@automatelab/citation-intelligence@atrib/agent@automatalabs/mcp-server-playwright@atlaskit/editor-toolbar-model@atray/mcp@atlaskit/editor-plugin-ui-control-registry@atomicmail/mcp-github@astro-slides/cli@atomicmail/mcp@ather-mcp/gaia-mcp-server@autodev/context-mcp@atollhq/mcp-server@atomicmail/agent-skill-modelcontextprotocol@auto-nomos/mcp-server@atheory-ai/skillex@atlassian/clientside-extensions-registry@atbash/atbash-mcp@augustdigital/config@authzed/authzed-node
Badge API: https://mastyf-live-cpb69yhkq-rudraneel93-gmailcoms-projects.vercel.app/api/v1/badge/<package>