MCP security scanning: what it can prove
What an automated scan of an MCP server can actually establish, what it structurally cannot, and why an inconclusive result beats a confident guess.
Blog
Scoring philosophy, MCP security, and what changed this week.
VerifyMCP now supports MCP 2026-07-28
The 2026-07-28 revision makes MCP stateless, removing the initialize handshake and sessions. What changed, what it means for your server, and which scores move.