Mcpindex Web — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcpindex Web (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <a href="https://mcpindex.ai"><img src="public/brand/github-readme.png" alt="mcpindex.ai - the trust layer for MCP tools" width="840"></a> </p>
The trust layer for MCP tools.
A verdict (ALLOW / DENY / REVIEW) on whether an MCP tool does what it claims, before your agent acts. Your agent trusts every tool it is handed; mcpindex doesn't.
Live site · Trust · Methodology · Brand · npm: mcp-server-mcpindex
GET /api/v1/trust/tool/<server_id>/<tool_name> returns a per-tool verdict: decision + dimensions + severity. Fail-closed; advisory at v1.npm install -g mcp-server-mcpindex. Add to Claude Desktop / Cursor / Cline / Zed; ask check_tool_trust before invoking a tool it just discovered./llms.txt, /.well-known/mcp-index.json, and JSON-LD on every page.npm install
node scripts/fetch-snapshot.mjs # one-time: pull current registry snapshot
npm run dev # http://localhost:3000Snapshot lives at data/snapshot.json (committed). Refresh anytime with the script.
registry.modelcontextprotocol.io/v0/servers, refreshed daily via Vercel cronlib/quality.ts (open methodology - PRs welcome)lib/search.ts (keyword now; embeddings v2 when OPENAI_API_KEY is wired)mcpindex/
├── app/ # Next.js routes
│ ├── api/v1/ # Versioned public API
│ ├── api/cron/ # Vercel-cron-driven endpoints
│ ├── server/[slug]/ # 3,500+ per-server pages (generateStaticParams)
│ ├── best/[category]/ # 28 curated category pages
│ └── ... # leaderboard, changelog, methodology, about, pricing, terms, privacy, stats
├── components/ # Header, Footer, AgentDemo (live demo), LiveTicker
├── lib/ # registry, quality, search, categorize, installs, types
├── scripts/ # sync-registry.mjs, fetch-snapshot.mjs (one-shot)
├── data/ # snapshot.json (committed) + snapshots/ (cron-written)
├── launch/ # all launch-day copy: Show HN, Reddit, cold emails, pitches
├── mcp-server-mcpindex/ # the npm-distributed MCP server
└── READY_TO_LAUNCH.md # ops checklist for going livemcp-server-mcpindex (the npm package): MIT.Unofficial. Not affiliated with Anthropic. The Model Context Protocol is open under MIT and trademarks remain with their owners. Server data comes from the official MCP registry.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.