awesome-mcp-security

awesome-mcp-security is a curated registry/listing of MCP servers along with a daily-updated “Trust Score” intended to help AI agents assess the safety of using particular MCP servers (i.e., attack-surface/prompt-injection/tool-poisoning risk), not the underlying code quality of those servers.

Evaluated Mar 30, 2026 (0d ago)

Homepage ↗ Repo ↗ Security mcp ai-security trust-scores awesome-list prompt-injection agent-risk-assessment

⚙ Agent Friendliness

/ 100

Can an agent use this?

🔒 Security

/ 100

Is it safe for agents?

⚡ Reliability

/ 100

Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality

Documentation

Error Messages

Auth Simplicity

100

Rate Limits

🔒 Security

TLS Enforcement

Auth Strength

Scope Granularity

Dep. Hygiene

Secret Handling

This repository content does not describe a service/API with transport/security controls; it primarily publishes curated security scoring information. As such, security scores here mostly reflect that there is no directly assessable authentication/transport/secret-handling surface in the provided material.

⚡ Reliability

Uptime/SLA

Version Stability

Breaking Changes

Error Recovery

Best When

You need a practical starting point to prioritize which MCP servers to integrate, and you will still enforce agent safety controls (sandbox, allowlists, strict permissions).

Avoid When

You require authoritative or auditable security assurance for a specific MCP server release; this repo provides aggregated scores/curation rather than verifiable per-deployment security guarantees.

Use Cases

• Selecting safer MCP servers for automated AI agent workflows
• Filtering MCP tool integrations by trust/attack-surface risk
• Guidance for adding guardrails/sandboxing around higher-risk MCP servers

Not For

• Security testing a specific MCP server implementation in your environment
• Replacing runtime defenses (sandboxing, least privilege, output filtering)
• Guaranteeing safety of any specific MCP server without independent verification

Interface

REST API

GraphQL

gRPC

MCP Server

SDK

Webhooks

Authentication

OAuth: No Scopes: No

No authentication interface described; this appears to be a registry/readme-driven listing rather than an API service.

Pricing

Free tier: No

Requires CC: No

No pricing details provided in the provided content.

Agent Metadata

Pagination

none

Idempotent

False

Retry Guidance

Not documented

Known Gotchas

⚠ Scores are intended as agent attack-surface guidance, not a guarantee of safety or correctness of the MCP server itself.
⚠ A daily-updated registry can lag behind new MCP server changes; reassess for the exact version/commit you deploy.
⚠ Trust scores can be impacted by how tools are used in an agent’s prompt/planning loop; runtime controls remain necessary.

Alternatives

Run your own automated security scans/probing against MCP servers you intend to use Use an MCP gateway/proxy with policy enforcement and allowlisted tools Rely on vendor/provider security documentation and your own threat modeling for each MCP integration

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for awesome-mcp-security.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

API endpoint ↗ Agent guide ↗ Report inaccuracy

Scores are editorial opinions as of 2026-03-30.