Static security + correctness audit for MCP server repos. Ships four checks. v0.5 fixes a v0.4 false-positive family where list-concatenation (e.g. `["kubectl"] + args + ["get"]`) was misclassified as string-interpolation in command_injection.
Cross-referenced across 55 tracked directories
#17914
Popularity Rank
2 / 55
Listed In
Growing
Adoption Stage
6/30/2026
First Seen
259
Monthly Downloads
Gaining traction in the ecosystem
Cross-Posting Opportunities
Could also be listed in these directories:
Score: 100/100
0 dependency vulnerabilities found
Live Tennis API
MCP server for the Live Tennis API — give Claude, Cursor and other LLM agents real-time tennis scores, players, odds and model win-probability.
...moreSAIHM production thin-client. Seals client-side via @saihm/client-pro (ML-DSA-65 identity, per-cell AES-256-GCM DEK wrapped under a client KEK, ML-KEM-768 authenticated sharing) and POSTs opaque ciphertext to the blind, non-custodial SAIHM /mcp endpoint.
...moreByKaranteli
MCP server for live crypto derivatives data from bykaranteli.com: funding rates, funding arbitrage, open interest pressure, Fear & Greed, BTC dominance and verified signal performance. Free, no API key.
...moreTokenLab
MCP server for TokenLab model discovery, pricing, native endpoint guidance, and optional inference helpers.