About VerifyMCP

VerifyMCP is an independent trust index for Model Context Protocol (MCP) servers. As the ecosystem of MCP servers (npm packages and remote endpoints alike) grows faster than anyone can vet by hand, we score every one on a single transparent scale from 0 to 100, so you can tell at a glance which servers have earned trust and which haven't yet.

What we do

We continuously sync the official MCP registry and re-score every server on a rubric of verifiable signals: supply-chain security, build provenance, endpoint security, transport, schema quality, and the stability of the tool surface itself. We score only what we can verify: where a signal can't be checked, it's marked inconclusive rather than guessed. The full method is public in how we score.

Independent by design

VerifyMCP is not affiliated with Anthropic or with any server author. We take no payment to raise a score and there is no way to buy a better ranking. Advertising placements are clearly labelled and never influence the rubric. Scores are estimates derived from public, reproducible checks; they're a starting point for your own due diligence, not a guarantee.

Who builds it

VerifyMCP is built and maintained by Stuart Blackler, a Principal Engineer and former CTO at Illuvium with 15+ years shipping production systems across fintech and Web3, and a long-standing focus on software supply-chain security. The scoring rubric is grounded in that background: the same standards used to assess production dependencies, applied to the MCP ecosystem.

Find more of his work on codewithstu.tv, GitHub, and YouTube.

Get in touch

Spotted a scoring mistake or want to discuss an advertising placement? Email [email protected].