TrustedMCP

TrustedMCP is a directory of MCP (Model Context Protocol) servers, the connectors that let AI assistants such as Claude, Cursor and VS Code work with tools like GitHub, Slack, Stripe or a database.

Instead of ranking servers by popularity, TrustedMCP gives each listing an editorial A-D grade built only from signals anyone can look up:

• Login: does the server support or require authentication?
• Upkeep: how recently and how often is it updated?
• Known bugs: are there published vulnerabilities, and are they fixed?
• Connection: does it run locally or over HTTP, and what are the defaults?

The grade is an assessment of those public signals, not a security audit or a certification. A good grade doesn't mean a server is safe in your setup. Use it as a starting point for your own review.

Grades are added and re-checked over time, and each page shows when it was last updated. Each listing also shows community reviews from people who have run the server, kept separate from the grade.

The registry page checks the official MCP Registry each night against public vulnerability databases (OSV, GitHub advisories, NVD). Entries with no package those databases can look up, such as remote-only servers, can't be checked this way.

TrustedMCP doesn't use AI itself: it's a directory and a set of free tools (a read-only grades API and an open-source MCP server) for people who build with AI assistants. There are also practical guides on MCP security, authentication, prompt injection and setting up popular servers. Free to use, no signup needed.