Check an MCP server before your agent installs it

Mastyf Trust scores npm MCP packages on known vulnerabilities, supply-chain signals, and how the server behaves when probed. Free and public.

Watch the walkthrough
  1. 1Look upType an npm package name. Static analysis runs right away.
  2. 2Deep scanOptionally probe the live MCP server for runtime signals and a richer score.
  3. 3EmbedCopy the badge markdown from the score page into your README.

Recently scored packages

Loading packages...

Badge API: https://mastyf-ai-cloud.vercel.app/api/v1/badge/<package>