MCP Security Index
Before you install an MCP server, see what it can do. AxioRank enumerates the tools each server declares (read-only, it never calls one) and grades the blast radius of what it can do: write, delete, execute, credential, and wildcard-scope capabilities. Scan a server not listed here.
7 servers in Reference · 16 with flagged capabilities
- ATime Anthropic (MCP reference)Reference · 2 tools · no flagged capabilities
- AEverything (reference test server) Anthropic (MCP reference)Reference · 13 tools · no flagged capabilities
- AAWS Documentation (AWS Labs) AWS (awslabs)Reference · 4 tools · no flagged capabilities
- AWikipedia rudra-raviReference · 22 tools · no flagged capabilities
- AarXiv blazickjpReference · 10 tools · no flagged capabilities
- ASequential Thinking Anthropic (MCP reference)Reference · 1 tool · Wildcard scope / permission
- –Google Maps Anthropic (MCP reference, archived)Reference · scan pending
How the grades work
A grade measures blast radius: how much a server could do if it were compromised or misinstructed, based on the capabilities it declares (write, delete, execute, credential access, wildcard scope). It is not a vulnerability assessment and not a judgment of the vendor. Lower is better: A is 0 to 19, up to F at 80 and above. The scan is read-only. It lists tools and never calls one.
Run a server? You can scan it yourself and embed your grade. See something off? Every server page links a re-scan.
Govern the MCP servers your agents use
AxioRank is the security gateway for AI agents: allowlist servers, block risky tool calls, and get an audit trail of every action.
Start free