Security Scores

We scan every MCP server for security issues so you don't have to.

How It Works

Every server indexed on Protodex is automatically scanned and assigned a security band based on repository health signals: maintenance activity, license, dependency hygiene, and known vulnerability patterns.

✓ Secure 1,076 servers — No known vulnerabilities. Actively maintained. Safe to use.

⚠ Review 347 servers — Needs review. May have stale dependencies, missing license, or limited maintenance history.

✗ Risk 1,510 servers — Known issues or unmaintained. Use with caution.

Coverage

2,933 of 18,321 servers have been scanned (16% coverage). Scores are updated weekly alongside the directory.

Methodology

Security scores are calculated from public repository signals:

Last commit date (is it actively maintained?)
License presence and type
Star count and community adoption
Dependency freshness
Known vulnerability database cross-reference
Repository configuration (branch protection, etc.)

Scores range from 0-100. Green = 70+, Yellow = 40-69, Red = below 40.