MCP Scores

The independent trust index for MCP servers, daily rankings between 0-100. Covers package and remote servers from the official registry

[MCP Scores @MCPScores]

https://t.co/yXfUfDnCoQ

[MCP Scores @MCPScores]

🔒 TLS failure

io.github.ofirbaranesad-agent/contract-powers

Serving an expired TLS certificate. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

https://t.co/UWLwwr7aPh

[MCP Scores @MCPScores]

🚨 Critical vulnerability

io.github.loxhness/devpulse-mcp

Newly listed carrying an unpatched critical vulnerability (CVE-2026-102829). A fixed version is available.

[MCP Scores @MCPScores]

https://t.co/BVgDnT4R73

[MCP Scores @MCPScores]

🚨 Critical vulnerability

io.github.utilix-tech/utilix-mcp

Newly listed carrying an unpatched critical vulnerability (CVE-2025-1302). A fixed version is available.

[MCP Scores @MCPScores]

https://t.co/VIEMQDKRRO

[MCP Scores @MCPScores]

🔒 TLS failure

family.fuci.www/fuci

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

https://t.co/u5BrGw2dCR

[MCP Scores @MCPScores]

🔒 TLS failure

io.github.bch1212/agent-commerce-mcp

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

https://t.co/KO5unBLIWN

[MCP Scores @MCPScores]

🔒 TLS failure

org.llmpress/llmpress

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

https://t.co/b6NweTgyY6

[MCP Scores @MCPScores]

🔒 TLS failure

io.github.bch1212/mcp-grantiq

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

https://t.co/cK1mbGrmEz

[MCP Scores @MCPScores]

🔒 TLS failure

com.wolfloyee/mcp

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.

[MCP Scores @MCPScores]

Ecosystem mix over time https://t.co/cPDFcm6Ud8

[MCP Scores @MCPScores]

Remote endpoints are now the main way new MCP servers get listed

Since 23 Oct the official registry has added about 7,800 servers with a remote endpoint, roughly twice as many as on npm (about 4,300)

[MCP Scores @MCPScores]

https://t.co/RLrTl6KTMy

[MCP Scores @MCPScores]

🔒 TLS failure

io.github.3esign/ratchet

Serving a TLS certificate for a different hostname. Traffic to it can be intercepted.