greyridge-x402-tools

MCP server security scorecards

Independent, static security reads of well-known public MCP servers — each one scans the tool definitions the server advertises for prompt-injection / tool-poisoning patterns (OWASP LLM01/LLM08) and checks them against the Anthropic Claude Connector Directory review criteria. Every scorecard is dated and re-runnable by you in one keyless call; results are point-in-time (tool definitions drift).

Last generated 2026-10-22.

• DeepWiki — clear injection verdict, 3 tools, 6 directory blocker(s)
• Wolfram Alpha — clear injection verdict, 3 tools, directory-ready
• Hugging Face — clear injection verdict, 4 tools, directory-ready
• Cloudflare Docs — clear injection verdict, 2 tools, directory-ready
• Astro Docs — clear injection verdict, 1 tools, 2 directory blocker(s)
• Hive Intelligence — clear injection verdict, 8 tools, 8 directory blocker(s)
• Find A Domain — clear injection verdict, 2 tools, 4 directory blocker(s)
• tandem.ac — clear injection verdict, 13 tools, directory-ready
• Getlead — clear injection verdict, 35 tools, directory-ready
• Inside Ads — clear injection verdict, 3 tools, 6 directory blocker(s)
• Brainy Prices — UAE Cost of Living — clear injection verdict, 26 tools, 26 directory blocker(s)
• mcp.datadubai.ae — clear injection verdict, 6 tools, directory-ready
• EasyVoice text to speech — clear injection verdict, 7 tools, 7 directory blocker(s)
• GENOSYS UAE — clear injection verdict, 11 tools, 11 directory blocker(s)
• groTAX by Grovisor — clear injection verdict, 8 tools, 8 directory blocker(s)
• Plant Guide: Dubai gardening research — clear injection verdict, 15 tools, directory-ready
• Projectory — clear injection verdict, 5 tools, 5 directory blocker(s)
• Propick Integration MCP — clear injection verdict, 8 tools, 16 directory blocker(s)
• Fenlight — clear injection verdict, 8 tools, 8 directory blocker(s)
• Vera — clear injection verdict, 16 tools, directory-ready
• Events.Aero — clear injection verdict, 5 tools, directory-ready
• hood. — .hood name service — clear injection verdict, 5 tools, 10 directory blocker(s)
• mcp.goji.agency — clear injection verdict, 9 tools, 16 directory blocker(s)
• JustIdea Agency — clear injection verdict, 8 tools, directory-ready
• Business Contact Finder — clear injection verdict, 1 tools, 2 directory blocker(s)
• Contractor Licence Changes — clear injection verdict, 2 tools, 4 directory blocker(s)
• Licensed House Painters — clear injection verdict, 3 tools, 3 directory blocker(s)
• Bureau public reader — clear injection verdict, 5 tools, 5 directory blocker(s)
• Achromat MOM — clear injection verdict, 1 tools, directory-ready
• actwise.ai — clear injection verdict, 2 tools, 2 directory blocker(s)
• mcp.adoraads.ai — clear injection verdict, 6 tools, directory-ready
• advisorsai.ai — clear injection verdict, 1 tools, 1 directory blocker(s)
• AFG: agents hire agents (test money) — clear injection verdict, 18 tools, 18 directory blocker(s)
• AFMR Discovery — clear injection verdict, 4 tools, 4 directory blocker(s)
• Agenlify AI Agent Directory — clear injection verdict, 3 tools, 3 directory blocker(s)
• agent-bev — clear injection verdict, 9 tools, directory-ready
• agentberg.ai — clear injection verdict, 11 tools, 22 directory blocker(s)
• Agentboard — clear injection verdict, 35 tools, 35 directory blocker(s)
• Agent Ready Report — clear injection verdict, 2 tools, directory-ready
• Agentic Terminal Directory — clear injection verdict, 6 tools, 12 directory blocker(s)
• CounterScript - Drug Price Benchmarks — clear injection verdict, 1 tools, directory-ready
• GreenLight - Plug-in Solar Law Registry — clear injection verdict, 2 tools, directory-ready
• GroundRules - US Law Text — clear injection verdict, 4 tools, directory-ready
• GroundTruth - Environmental Records — clear injection verdict, 4 tools, directory-ready
• overassessed.agentlookups.ai — clear injection verdict, 1 tools, directory-ready
• Plumbline - Contractor License Checks — clear injection verdict, 1 tools, directory-ready
• Spoon Scout - Food Contaminant Lookup — clear injection verdict, 6 tools, directory-ready

Scan a server not listed here:

curl "https://x402-data-api.sigrunner.workers.dev/scan/mcp/preview?url=https://your-mcp-host/mcp&directory=true"

Method and the rest of the catalogue: vet an MCP server before your agent trusts it. Independent scans by Grey Ridge Signals.

This site is open source. Improve this page.