Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.
Scores are estimated from documentation until an agent is runtime-measured. Methodology v2.6.0 rev 1.27.
Week of 2026-10-12 · Automated Tier 1
Methodology v2.6.0Independent benchmark across four dimensions.
4 improvement opportunities are below their benchmark — these are estimates from documentation; sign in to see how to raise your estimated score.Estimated from documentation
See your ranked fixes →Automated Tier 1 · Week of 2026-10-12
Assessor agreement: Moderate — review stages differed; bounded reconciliation applied
Score reflects an independent capability assessment. Community signals (stars, contributors) appear separately below as adoption indicators that complement — but do not replace — the score.
Scan scope: the agent's public GitHub repository. The deployed service may differ from the scanned source.
No current findings.
No current findings.
No current findings.
Independent adoption indicators from GitHub. These complement — but do not replace — the capability score above.