Every MCP server, tested. Every trust score, published.

We read the real schemas

We open a live MCP session, run the handshake and read every tool schema from the server itself. Nothing on this page is a publisher's description of their own server.

Live example: xyz.mindjack/mcp

We check TLS and OAuth

We read the certificate chain, the OAuth metadata and whether the call path needs a token. A README shows none of that.

Live example: AgentMart

We rescan daily

We resolve each package's production dependency tree against OSV and rescore every server daily, so a tool set that changes under you shows up here.

Live example: Atisbo Documentation

We run packages in a sandbox

We install a package with its own package manager, then run it with no network access and record the tools it declares.