Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
| Endpoint | https://mcpcheck.netlify.app/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.1 |
| Now | 2 tools · grade A (95) · pin ts_4f9ce6c68d04bf55fd5e23d9de38de54 · protocol 2025-06-18 |
| First / last listed | 2026-11-06 01:28 UTC / 2026-11-06 01:28 UTC |
| Grade over time | 2026-11-06: A (95), 2 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: check_mcp_trust scan_mcp_server
check_mcp_trust | Check if an MCP server is safe to install: returns a trust score (0-100, grade A-F). Accepts a registry name (io.github.x/y), a GitHub repo (owner/repo), or a remote MCP URL. For remote servers it live-connects and analyzes the actual exposed tools for tool-poisoning + capabilities, and checks the backing repo (maintenance, license, security policy, auth). Call BEFORE installing or recommending an params: target* |
scan_mcp_server | Scan and inspect an MCP server for security issues before connecting it: live tool-poisoning analysis, exposed-tool inventory + capabilities, TLS, and repo trust signals. Same engine as check_mcp_trust. Accepts a registry name, GitHub repo, or remote MCP URL. params: target* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.