MCP
Generic Model Context Protocol servers, usable from any MCP-capable agent. This is also the registry default: artifacts that don't declare a more specific target land here.
Each server goes through the full suite: agent and MCP config safety (agentshield), OWASP Agentic and MCP top-10 auditing (agent-audit-kit), known-vulnerable dependencies (osv-scanner, trivy), data-flow SAST (bearer), a behavioral detector for the postmark-mcp backdoor shape, and an install-doc detector for the FakeGit README shape.
Every scanner's verdict is shown separately at one flat rank. The composite score is a subordinate summary and never hides a finding.
435 artifacts target MCP of 435 scanned registry-wide.
Want search, badge, or scanner filters on top of this? Open MCP in the full registry.