MCP server registry
Facts mcp-audit publishes about 55 public MCP server packages: who publishes it, recorded advisories, and what it can do. Facts, not grades: a package's risk depends on how you run it.
26 have a verified publisher. 14 have recorded advisories (184 in total), and 5 have at least one with no fix. Registry updated 2026-10-25. Every page is also JSON.
| Package | Ecosystem | Maintainer | Advisories | Status |
|---|---|---|---|---|
| @agentdeskai/browser-tools-mcp | npm | AgentDesk | 0 | listed, no known advisories |
| @autoposting.ai/cli | npm | Autoposting-ai | 0 | verified, no known advisories |
| @azure/mcp | npm | Microsoft | 1 | 1 unfixed advisory |
| @browserbasehq/mcp | npm | Browserbase | 0 | listed, no known advisories |
| @cloudflare/mcp-server-cloudflare | npm | Cloudflare | 0 | listed, no known advisories |
| @mcpjam/inspector | npm | MCPJam | 1 | 1 unfixed advisory |
| @mintlify/mcp | npm | Mintlify | 0 | listed, no known advisories |
| @modelcontextprotocol/inspector | npm | Anthropic | 2 | 2 fixed advisories |
| @modelcontextprotocol/sdk | npm | Anthropic | 8 | 8 fixed advisories |
| @modelcontextprotocol/server-aws-kb-retrieval | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-brave-search | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-everart | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-everything | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-filesystem | npm | Anthropic | 2 | 2 fixed advisories |
| @modelcontextprotocol/server-gdrive | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-github | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-gitlab | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-google-maps | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-memory | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-postgres | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-puppeteer | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-redis | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-sequential-thinking | npm | Anthropic | 0 | verified, no known advisories |
| @modelcontextprotocol/server-slack | npm | Anthropic | 0 | verified, no known advisories |
| @neondatabase/mcp-server-neon | npm | Neon | 0 | listed, no known advisories |
| @notionhq/notion-mcp-server | npm | community | 0 | listed, no known advisories |
| @palisadeemail/mcp | npm | Palisade | 0 | verified, no known advisories |
| @playwright/mcp | npm | Microsoft | 1 | 1 fixed advisory |
| @shopify/dev-mcp | npm | Shopify | 0 | listed, no known advisories |
| @stripe/agent-toolkit | npm | Stripe | 0 | listed, no known advisories |
| @supabase/mcp-server-supabase | npm | Supabase | 0 | listed, no known advisories |
| @toolbox-sdk/server | npm | 1 | 1 fixed advisory | |
| @upstash/context7-mcp | npm | Upstash | 0 | listed, no known advisories |
| docpull | pypi | Raintree Technology | 0 | verified, no known advisories |
| exa-mcp-server | npm | Exa | 0 | listed, no known advisories |
| firecrawl-mcp | npm | hello_sideguide | 0 | listed, no known advisories |
| flowise | npm | FlowiseAI | 114 | 17 unfixed advisories |
| gemini-mcp-tool | npm | filecrop | 1 | 1 unfixed advisory |
| hol-guard | pypi | HOL (Hashgraph Online) | 0 | verified, no known advisories |
| langchain-mcp-adapters | pypi | LangChain | 0 | listed, no known advisories |
| mcp | pypi | Anthropic | 7 | 7 fixed advisories |
| mcp-atlassian | pypi | community | 30 | 30 fixed advisories |
| mcp-remote | npm | punkpeye (from 0.2.5, 2026-08-26; earlier releases geelen/mcp-remote) | 7 | 1 unfixed advisory |
| mcp-server-docker | npm | aholsinger | 0 | listed, no known advisories |
| mcp-server-fetch | pypi | Anthropic | 0 | verified, no known advisories |
| mcp-server-git | pypi | Anthropic | 4 | 4 fixed advisories |
| mcp-server-kubernetes | npm | flux159 | 5 | 5 fixed advisories |
| mcp-server-linear | npm | dvcrn | 0 | listed, no known advisories |
| mcp-server-mysql | npm | community | 0 | listed, no known advisories |
| mcp-server-postgres | pypi | unknown — publisher does not match declared Anthropic attribution | 0 | listed, no known advisories |
| mcp-server-qdrant | pypi | Qdrant | 0 | listed, no known advisories |
| mcp-server-terraform | npm | community | 0 | listed, no known advisories |
| mcptoon | pypi | activeing123 | 0 | verified, no known advisories |
| screenpipe-mcp | npm | screenpipe | 0 | verified, no known advisories |
| tavily-mcp | npm | Tavily | 0 | listed, no known advisories |