AxioRankThe Security Gateway for AI Agents
Open the console

MCP Security Index

Before you install an MCP server, see what it can do. AxioRank enumerates the tools each server declares (read-only, it never calls one) and grades the blast radius of what it can do: write, delete, execute, credential, and wildcard-scope capabilities. Scan a server not listed here.

359
servers indexed
169
scanned
115
graded A

Scan a server that is not listed

Scans a remote MCP server or agent card by URL. For a local stdio server, run npx @axiorank/mcpaudit.

AllDev toolsDataSearch & webProductivityCommunicationCloudCommerceReference
Sort:Safest firstRiskiest firstMost popular

359 servers · 79 with flagged capabilities

How the grades work

A grade measures blast radius: how much a server could do if it were compromised or misinstructed, based on the capabilities it declares (write, delete, execute, credential access, wildcard scope). It is not a vulnerability assessment and not a judgment of the vendor. Lower is better: A is 0 to 19, up to F at 80 and above. The scan is read-only. It lists tools and never calls one.

Run a server? You can scan it yourself and embed your grade. See something off? Every server page links a re-scan.

Govern the MCP servers your agents use

AxioRank is the security gateway for AI agents: allowlist servers, block risky tool calls, and get an audit trail of every action.

Start free