MCP

This page lists generic Model Context Protocol servers, usable from any MCP-capable agent. We treat MCP as the registry default: packages that don't declare a more specific target land here.

We run the same scanner suite on every one: agent and MCP config safety (agentshield), OWASP Agentic and MCP top-10 auditing (agent-audit-kit), known-vulnerable dependencies (osv-scanner, trivy), data-flow SAST (bearer), and detectors we wrote ourselves: nerlo-behavioral, which looks for the postmark-mcp backdoor shape, and nerlo-install-instruction, which looks for the FakeGit README shape.

We show every scanner's verdict separately at one flat rank. The composite score is a subordinate summary; it never hides a finding.

We track 25,317 packages that target MCP, out of 47,540 registry-wide.

No findings does not mean no risk. Nerlo aggregates automated scanner output; automated scanning is one layer of defence, not a substitute for review.