Published findings

111 decisions across 99 servers, from 1,673 scanned. 745 further findings are withheld pending private disclosure and do not appear here.

Looking for your own server and not finding it? A repository can be registered under more than one name, and findings are published under one of them, so the name you know may not be the name listed. The repository address beside each server is the reliable way to recognise your own. If your findings are high or critical they are withheld entirely and will not appear here at all.

By server

A decision is one thing to fix. Lines counts how many places it appears.
ServerDecisionsLinesReported
ai.bithuman/docs
https://github.com/bithuman-product/public-docs
11accepts any origin ("*")
ai.djzs/trust-mcp
https://github.com/SIFR0-dev/djzs-AI
22accepts any origin (*), listens on 0.0.0.0
ai.trustysquire/trusty-squire
https://github.com/Trusty-Squire/trusty-squire
23listens on 0.0.0.0, listens on ::
app.theona/linkedin-content-planner
https://github.com/theonaai/linkedin-content-planner-mcp
11listens on 0.0.0.0
cat.2022/catalunya-2022
https://github.com/catalunya-2022/mcp
11accepts any origin (*)
com.adbutler/mcp-server
https://github.com/adbutler/mcp-server
11accepts any origin (*)
com.agent-manifest/amp-mcp
https://github.com/AMProtocol/AMP
12accepts any origin (*)
com.cpz-lab.mcp/cpzai
https://github.com/CPZ-Lab/cpzai-mcp-server
22accepts any origin (*), listens on 0.0.0.0
com.expense-budget-tracker/expense-budget-tracker
https://github.com/kirill-markin/expense-budget-tracker
13listens on 0.0.0.0
com.generect/generect-mcp
https://github.com/generect/generect_mcp.git
11accepts any origin (true)
com.nooticr/mcp
https://github.com/Nooticr/nooticr-mcp
11accepts any origin (*)
com.onkernel/kernel-mcp-server
https://github.com/onkernel/kernel-mcp-server
26accepts any origin ("*"), accepts any origin (*)
com.post-pulse/mcp-server
https://github.com/PostPulse/mcp-server-postpulse
11accepts any origin ('*')
com.theneuralledger/intelligence
https://github.com/bekirdag/tnl-intelligence
11accepts any origin (*)
com.universalagentforum/forum
https://github.com/vishprometa/universal-agent-forum
16accepts any origin ('*')
dev.filetopdf/filetopdf-mcp
https://github.com/FileToPDF/filetopdf-mcp
11accepts any origin (*)
dev.weblens/weblens
https://github.com/vasilistotskas/weblens
11accepts any origin ("*")
eu.ansvar/italian-law-mcp
https://github.com/Ansvar-Systems/italian-law-mcp
11accepts any origin (*)
io.github.930m310n/geomelon-mcp
https://github.com/930m310n/geomelon-mcp
11accepts any origin ('*')
io.github.BrightbeamAI/chap
https://github.com/BrightbeamAI/chap
15accepts any origin (*)
io.github.DmitriyGolub/threejs-devtools
https://github.com/DmitriyGolub/threejs-devtools-mcp
22accepts any origin ('*'), accepts any origin (*)
io.github.FastAlertNow/mcp-server
https://github.com/FastAlertNow/mcp-server
11accepts any origin (*)
io.github.Jemplayer82/mcp-switchboard
https://github.com/Jemplayer82/mcp-switchboard
11listens on 0.0.0.0
io.github.Kind-ling/twig
https://github.com/Kind-ling/twig
11accepts any origin (*)
io.github.New1Direction/trust-oracle
https://github.com/New1Direction/webmcp-anything
11accepts any origin ("*")
io.github.Omodaka9375/wake
https://github.com/Omodaka9375/wake
11accepts any origin (*)
io.github.PStryder/tablacognita
https://github.com/PStryder/TablaCognita
22accepts any origin (*), listens on 0.0.0.0
io.github.SYMBaiEX/usagemax
https://github.com/SYMBaiEX/usagemax
12accepts any origin (*)
io.github.ThiagoDataEngineer/l402-kit
https://github.com/ShinyDapps/l402-kit
11accepts any origin (*)
io.github.Wonderfulian/kbv-server
https://github.com/Wonderfulian/kbv-server
11listens on 0.0.0.0
io.github.alisaitteke/photoshop-mcp
https://github.com/alisaitteke/photoshop-mcp
11root is '/'
io.github.amansingh63/dbhub-analytics
https://github.com/amansingh63/dbhub-analytics
11listens on 0.0.0.0
io.github.antvis/mcp-server-chart
https://github.com/antvis/mcp-server-chart
11accepts any origin ("*")
io.github.assafbar2/agentswitchboard
https://github.com/assafbar2/agentswitchboard.dev
11accepts any origin ('*')
io.github.atul-fusionpact/fusionpact-vectordb
https://github.com/FusionpactTech/fusionpact-vectordb
13accepts any origin (*)
io.github.beyondnetcode/evolith
https://github.com/beyondnetcode/evolith_arch32
11listens on 0.0.0.0
io.github.brandonclark1996-design/toolrank
https://github.com/brandonclark1996-design/toolrank
11accepts any origin ('*')
io.github.carbaj03/solution-commons
https://github.com/carbaj03/solution-commons
11accepts any origin ('*')
io.github.dappros/ethora-mcp-cli
https://github.com/dappros/ethora-mcp-cli
11accepts any origin ("*")
io.github.derNif/payanagent
https://github.com/derNif/payanagent
11accepts any origin ("*")
io.github.docracy1/runwayleft
https://github.com/docracy1/runwayleft
19accepts any origin ('*')
io.github.dominiclachance/neurakeep
https://github.com/dominiclachance/neurakeep
11accepts any origin (*)
io.github.douglasgan/asktian
https://github.com/douglasgan/asktian-mcp
11accepts any origin (*)
io.github.dubaikseniia-wq/entra-mcp
https://github.com/dubaikseniia-wq/entra-mcp
11accepts any origin ('*')
io.github.easingthemes/aem-mcp-server
https://github.com/easingthemes/aem-mcp-server
11accepts any origin ('*')
io.github.edycutjong/bagos
https://github.com/edycutjong/bagos
11listens on 0.0.0.0
io.github.entreprisedaney33-rgb/x402-seller-mcp
https://github.com/entreprisedaney33-rgb/x402-seller
23accepts any origin (*), listens on 0.0.0.0
io.github.fboldo/openscad-mcp-server
https://github.com/fboldo/openscad-mcp-server
11accepts any origin ('*')
io.github.godavid/gitjog
https://github.com/godavid/gitjog
12accepts any origin ("*")
io.github.gosodax/builders-mcp
https://github.com/gosodax/builders-sodax-mcp-server
11listens on 0.0.0.0
io.github.greencore-solutions/gsc-fleet-mcp
https://github.com/greencore-solutions/gsc-fleet-mcp
11accepts any origin (*)
io.github.grichardomi/faxseal
https://github.com/grichardomi/mcp-server
11listens on 0.0.0.0
io.github.hongnoul/hwatu
https://github.com/hongnoul/hwatu
11root is '/'
io.github.iadnanmukhtar/hadithdb
https://github.com/iadnanmukhtar/hadithdb
11accepts any origin (*)
io.github.ihen404/x402-scraper-api
https://github.com/ihen404/x402-scraper-api
12listens on 0.0.0.0
io.github.imran-siddique/agentos
https://github.com/imran-siddique/agent-os
11accepts any origin (*)
io.github.ironflowsh/mcp
https://github.com/ironflowsh/mcp
11accepts any origin (*)
io.github.jigarkkarangiya/adobe-commerce-docs-mcp
https://github.com/jigarkkarangiya/adobe-commerce-docs-mcp
11accepts any origin (*)
io.github.josephibra/handoff-mcp-server
https://github.com/josephibra/handoff-mcp-server
24accepts any origin ("*"), listens on 0.0.0.0
io.github.kambleaa007/weather
https://github.com/kambleaa007/GrappleAI
11accepts any origin ('*')
io.github.khalidsaidi/ragmap
https://github.com/khalidsaidi/ragmap
23accepts any origin (true), listens on 0.0.0.0
io.github.krupalghori44-dev/infyicon-mcp
https://github.com/krupalghori44-dev/infyicon-mcp
23accepts any origin ('*'), accepts any origin (*)
io.github.lucyfuur94/webnav
https://github.com/lucyfuur94/webnav-core
12accepts any origin (*)
io.github.luisa-sys/lyra-mcp-server
https://github.com/luisa-sys/lyra-mcp-server
11accepts any origin (*)
io.github.mapdevsaikat/quantaroute-geocoder
https://github.com/mapdevsaikat/quantaroute-geocoder
12accepts any origin ('*')
io.github.mayankmahavar1mg/mcp
https://github.com/tata1mg/catalyst-core
11scope is '/'
io.github.meltingpixelsai/harvey-budget
https://github.com/meltingpixelsai/harvey-budget
14accepts any origin ("*")
io.github.meltingpixelsai/harvey-verify
https://github.com/meltingpixelsai/harvey-verify
14accepts any origin ("*")
io.github.mizukaizen/hive-doctrine-mcp
https://github.com/mizukaizen/hive-doctrine-mcp
12accepts any origin (*)
io.github.nirholas/solidity-compiler
https://github.com/nirholas/lyra-web3-playground
11accepts any origin (*)
io.github.nyuchi/mukoko-news
https://github.com/nyuchi/mukoko-news
11scope is '/'
io.github.pcas-io/plexus
https://github.com/pcas-io/plexus
11listens on 0.0.0.0
io.github.pipeshub-ai/mcp
https://github.com/pipeshub-ai/mcp-server
23accepts any origin (*), listens on 0.0.0.0
io.github.pollinations/ask-jev
https://github.com/pollinations/pollinations
12accepts any origin ("*")
io.github.proplineapi/propline-mcp
https://github.com/proplineapi/propline-mcp
11accepts any origin ("*")
io.github.pscale-commons/bsp-mcp
https://github.com/pscale-commons/bsp-mcp-server
11accepts any origin (*)
io.github.quantumproxies/quanticdata-mcp
https://github.com/quantumproxies/quanticdata-mcp-server
11accepts any origin (*)
io.github.roomi-fields/notebooklm-mcp
https://github.com/roomi-fields/notebooklm-mcp
11accepts any origin (*)
io.github.simonenavifare/navifare-mcp
https://github.com/navifare/navifare-mcp
11accepts any origin (true)
io.github.sonpiaz/openaffiliate-mcp
https://github.com/Affitor/open-affiliate
11accepts any origin ("*")
io.github.sp0oby/zkshare
https://github.com/sp0oby/zkShare
11accepts any origin ("*")
io.github.srotzin/hive-mcp-connector
https://github.com/srotzin/hive-mcp-connector
11accepts any origin (*)
io.github.sshwarts/napkin
https://github.com/sshwarts/napkin
11accepts any origin (*)
io.github.stockmarketscan/earningscalls-mcp
https://github.com/stockmarketscan/earningscalls-mcp
12accepts any origin ('*')
io.github.subsquid-labs/portal-mcp-server
https://github.com/subsquid-labs/portal-mcp-server
11accepts any origin (true)
io.github.telleroutlook/mcp-server
https://github.com/WasmAgent/wasmagent-js
11accepts any origin (*)
io.github.theYahia/robokassa-mcp
https://github.com/theYahia/robokassa-mcp
11accepts any origin (*)
io.github.veynor-xyz/veynor
https://github.com/veynor-xyz/veynor-mcp
11accepts any origin (*)
io.github.vincentvella/devloop
https://github.com/vincentvella/devloop
12accepts any origin (*)
io.github.vuluu2k/webcake-storefront-mcp
https://github.com/vuluu2k/webcake-storefront-mcp
16accepts any origin ("*")
io.github.wyattpalm2-eng/x402-seller
https://github.com/wyattpalm2-eng/x402-seller
11accepts any origin (*)
io.github.wyre-technology/immybot-mcp
https://github.com/wyre-technology/immybot-mcp
11accepts any origin (*)
io.github.wyre-technology/mailprotector-mcp
https://github.com/wyre-technology/mailprotector-mcp
11accepts any origin (*)
io.grovs/mcp
https://github.com/grovs-io/mcp
11listens on 0.0.0.0
io.opentweet/mcp
https://github.com/opentweetio/mcp-server
11accepts any origin (*)
live.pulsarsignal/pulsar
https://github.com/pyosang82/atoa-stream
27accepts any origin ('*'), listens on 0.0.0.0
org.thorchain.swap/thorchain-swap
https://github.com/thorchain/swap.thorchain
11accepts any origin ('*')
ru.invoicebox/mcp-server
https://github.com/InvoiceBox/invoicebox-mcp-server
11accepts any origin ('*')
sh.releases/mcp
https://github.com/buildinternet/releases
13accepts any origin (*)