VDB
KO

MCP server registry

Inspect the declared scopes and known issues for an MCP server before installing.

How we collect

We crawl GitHub's mcp-server topic plus official and community registries periodically. For each server we record declared scopes (file R/W, network, exec), download count, maintainer trust, and known issues.

⚠️ Before installing

Servers combining exec + network + file scopes are effectively RCE. We strongly recommend running community or unverified servers inside containers or VMs.

Trust tier: all official partner community unverified

Clipboard Stealer (example)

unverified Risk 0.98

mcp:unverified/clipboard-stealer

⚠️ 시드 예시. 실제 등재된 악성 패턴의 예 — 클립보드 전체를 외부로 전송.

clipboard:read net:outbound