Mcpcheck

Name: Mcpcheck
Author: joeyough

@joeyoughMCP server · External

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

Penetration testingv1.0.1

Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

Safety · AI5%Low risk
Does · AIReads2 read · 0 act, by tool name
ConnectRemote · no sign-inStreamable HTTP
PopularityNo stars yetUpdated 28 Aug 2026
StatusAll clearAnswered Odel on 13 Oct

What it does

2 read

Grouped by tool name. At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

2 · grouped by tool name · checked 13 Oct 2026

Read · 2Look things up

check_mcp_trust
scan_mcp_server

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Similar modules

Browse Penetration testing

MCP server: One MCP server.
Jshookmcp
@vmoranv · External2,035 GitHub stars.
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
OpenOSINTRun by its publisher: served from their own domain, namespace checked by the registry.
@openosint · External1,750 GitHub stars.
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Wireshark
@bx33661 · External288 GitHub stars.
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
MCP server: One MCP server.
Crowdsentinel
@thomasxm · External209 GitHub stars.
AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Reversecore MCP
@sjkim1127 · External208 GitHub stars.
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Shodan
@w0h1v · External177 GitHub stars.
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Code PathfinderRun by its publisher: served from their own domain, namespace checked by the registry.
@codepathfinder · External142 GitHub stars.
Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
ObservatoryRun by its publisher: served from their own domain, namespace checked by the registry.
@kryptosai · External141 GitHub stars.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.