Use this evidence before connecting an agent to an unfamiliar MCP server. MCP Queen publishes dated observations about protocol authentication boundaries and security-sensitive capabilities, while keeping them separate from operational grades.
This surface supports MCP inventory review, allowlist decisions, vendor due diligence, and change monitoring. It does not claim that metadata inspection proves a server safe. Source-code scanning, deployment controls, least privilege, runtime monitoring, and human approval remain necessary for privileged tools.
200+ recent public security/access observations
| Server | Observation | Status | Evidence | Observed |
|---|---|---|---|---|
| ai.smithery/samihalawa-whatsapp-go-mcp ai.smithery/samihalawa-whatsapp-go-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/saidsef-mcp-github-pr-issue-analyser ai.smithery/saidsef-mcp-github-pr-issue-analyser | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Technocore Archive & Ownership io.github.justuncase1210-del/technocore-archive | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/sachicali-discordmcp-suite ai.smithery/sachicali-discordmcp-suite | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Trillion io.github.kngf222/trillion | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/rfdez-pvpc-mcp-server ai.smithery/rfdez-pvpc-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| sigtap Agent Tools io.github.unnamedaiagent/sigtap-agent-tools | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| lucid.page page.lucid/lucid-page | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: delete_doc. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| lucid.page page.lucid/lucid-page | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PermitReporter — US Building Permit Intelligence com.permitreporter/us-building-permits | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.forgeagents-jp/oka-anywhere io.github.forgeagents-jp/oka-anywhere | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Pet Data Station com.petforai/pet-data-station | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Otherlay com.otherlay/otherlay | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SecureStamp Action Proof — Cross-Cloud Public Beta (Unverified) online.securestamp/action-proof | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| dev.workers.3labsio.kingofthehill/king-of-the-hill dev.workers.3labsio.kingofthehill/king-of-the-hill | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| dev.workers.3labsio.policy-gate/policy-gate dev.workers.3labsio.policy-gate/policy-gate | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PrismFact com.prismfact/hub | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.tickerscout/ticker-scout ai.tickerscout/ticker-scout | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| LinkDeal ai.linkdeal.www/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.mindola/lens ai.mindola/lens | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Traffic Parrot com.trafficparrot/public | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Caly com.trycaly/caly | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.kernora/agent-sec ai.kernora/agent-sec | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: check_action. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| ai.kernora/agent-sec ai.kernora/agent-sec | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TOVREK Current-State Resolver com.tovrek/current-state-resolver | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TopxAI Videos com.topxea.ai/videos | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TopxAI Models com.topxea.ai/models | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TicketsMinistry events com.ticketsministry.ai/events | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TopxAI Images com.topxea.ai/images | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TempoRevenue com.temporevenue/proposals | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| The Gastrologer — GI clinical tools for agents com.thegastrologer/clinical | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TokElements com.tokelements/tokelements | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| xyz.quillen/quillen xyz.quillen/quillen | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ConnectMachine ai.connectmachine/connectmachine | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Woo Revenue Incident Graph io.github.tytutueh13-sudo/woo-revenue-incident-graph | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TipRanks com.tipranks/tipranks | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Social Cooks MCP com.socialcooks/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/ramadasmr-networkcalc-mcp ai.smithery/ramadasmr-networkcalc-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/renCosta2025-context7fork ai.smithery/renCosta2025-context7fork | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/ref-tools-ref-tools-mcp ai.smithery/ref-tools-ref-tools-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/rainbowgore-stealthee-mcp-tools ai.smithery/rainbowgore-stealthee-mcp-tools | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/pythondev-pro-egw_writings_mcp_server ai.smithery/pythondev-pro-egw_writings_mcp_server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/proflulab-documentassistant ai.smithery/proflulab-documentassistant | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ourpr. io.github.joeyaflores/ourpr-courses | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/plainyogurt21-sec-edgar-mcp ai.smithery/plainyogurt21-sec-edgar-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/plainyogurt21-clintrials-mcp ai.smithery/plainyogurt21-clintrials-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| NBMEcalc MCP io.github.jiankn/nbmecalc | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/pinion05-supabase-mcp-lite ai.smithery/pinion05-supabase-mcp-lite | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/pinkpixel-dev-web-scout-mcp ai.smithery/pinkpixel-dev-web-scout-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.theluckystrike/per-diem io.github.theluckystrike/per-diem | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: trip_delete. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| io.github.theluckystrike/per-diem io.github.theluckystrike/per-diem | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.theluckystrike/deposits io.github.theluckystrike/deposits | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: deposit_delete. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| io.github.theluckystrike/deposits io.github.theluckystrike/deposits | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.theluckystrike/billing-docs-credit-notes-purchase-orders io.github.theluckystrike/billing-docs-credit-notes-purchase-orders | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| news.clstr/clstr news.clstr/clstr | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.eldesh/random-mcp io.github.eldesh/random-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TAM Lounge com.talkaboutmartin/lounge | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SkimNews com.skimnews/news | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Vagus Lab Research net.vaguslab/research | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Starcovery com.starcovery/mcp | sensitive_capabilities_declared | concern | 18 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: reveal_contact, list_campaigns, delete_campaign, generate_campaign_matches, add_campaign_match, remove_campaign_match, list_campaign_attachments, delete_campaign_attachment, export_campaign, whoami, get_credits, list_api_keys, create_api_key, revoke_api_key, intersect_lists, list_lists, get_list, delete_list. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Starcovery com.starcovery/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SongUp AI com.songupai/songup-ai | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Talent Summoner com.talentsummoner/talent-summoner | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Siigo Latam com.siigolatam/siigo | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: search. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Siigo Latam com.siigolatam/siigo | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Spansend com.spansend/whatsapp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| LayerCall com.layercall/trust-api | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Shipstar ai.shipstar/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| NinjaChat MCP ai.ninjachat/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| World Time com.invokera/world-time | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PLCs.ai ai.plcs/plcs-ai | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| James Prompt com.jamesprompt/james | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Public Holidays com.invokera/public-holidays | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Postal Codes com.invokera/postal-codes | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Invokera Status com.invokera/invokera-status | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| world.byway/mcp world.byway/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Invokera Discover com.invokera/discover | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/nickthelegend-test-mcp ai.smithery/nickthelegend-test-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/oxylabs-oxylabs-mcp ai.smithery/oxylabs-oxylabs-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/neverinfamous-memory-journal-mcp ai.smithery/neverinfamous-memory-journal-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/mrugankpednekar-bill_splitter_mcp ai.smithery/mrugankpednekar-bill_splitter_mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/mrugankpednekar-mcp-optimizer ai.smithery/mrugankpednekar-mcp-optimizer | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/motorboy1-my-mcp-server ai.smithery/motorboy1-my-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/morosss-sdfsdf ai.smithery/morosss-sdfsdf | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Wiggle io.github.jamesonhussey/wiggle | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: forget. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Wiggle io.github.jamesonhussey/wiggle | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/mjucius-cozi_mcp ai.smithery/mjucius-cozi_mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Schengen Counter com.schengencounter/schengen-counter | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/minionszyw-bazi ai.smithery/minionszyw-bazi | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/miguelgarzons-mcp-cun ai.smithery/miguelgarzons-mcp-cun | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Medicare Fee Schedule Rates com.s2reason/medicare-fee-schedule | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| com.shippdf/pdf com.shippdf/pdf | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| com.sgpbusiness/singapore-entities-directory com.sgpbusiness/singapore-entities-directory | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Riverview Office Cleaning com.riverviewofficecleaning/booking | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| RevExOS com.revexos/revexos | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SAMOS e-commerce com.samos-e/samos | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Motive Admin com.ridemotive.app.mcp/motive | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Esheria Regulatory Intelligence io.github.esherialabs/esheria | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| LocationLists io.github.kylehawke-stack/locationlists | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| baba News by baba Hebrew io.github.isaachorowitz/baba-news | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Sampuli io.github.kevinbett/sampuli | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.syncday-app/sync-day io.github.syncday-app/sync-day | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Lunium — Brazilian PIX and stablecoin payments com.luniumpay/pix-brazilian-payments | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ionluz — solar quotes (Brazil) io.github.surfer42069/ionluz | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Brain Scanner io.github.kevin-lozada-santos/brain-scanner | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Deep Art AI io.github.deeparteffects/deep-art-ai | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Twelve Permissions com.twelvepermissions/twelve-permissions | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| RecordX io.recordx/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ConsentStack io.consentstack/cookie-consent | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.marketcrew/market-data ai.marketcrew/market-data | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Currency Rates (ECB) com.invokera/currency-rates | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Book Search (Open Library) com.invokera/book-search | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Interactive Brokers (IBKR) com.ibkr/interactive-brokers-ibkr | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Panes — a private feed on your phone com.getpanes/panes | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| FolioFact com.foliofact/foliofact | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.fnobbe/crashtestyourstrategy io.github.fnobbe/crashtestyourstrategy | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| MGO — Multi-chain Gas Optimizer io.github.dlrjsdl200-byte/mgo-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/mfukushim-map-traveler-mcp ai.smithery/mfukushim-map-traveler-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Pool Pro Florida com.poolproflorida/pool-pro-florida | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/mayla-debug-mcp-google-calendar2 ai.smithery/mayla-debug-mcp-google-calendar2 | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/lukaskostka99-marketing-miner-mcp ai.smithery/lukaskostka99-marketing-miner-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/luminati-io-brightdata-mcp ai.smithery/luminati-io-brightdata-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/magenie33-quality-dimension-generator ai.smithery/magenie33-quality-dimension-generator | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PickShade color tools com.pickshade/pickshade | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Pryzm Memory com.pryzm-memory/memory | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Rankvisit com.rankvisit/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Polar Analytics com.polaranalytics/polar | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| uk.co.racingalpha/signals uk.co.racingalpha/signals | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.indexagent/scrypta-mcp io.github.indexagent/scrypta-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/lineex-pubmed-mcp-smithery ai.smithery/lineex-pubmed-mcp-smithery | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/leandrogavidia-vechain-mcp-server ai.smithery/leandrogavidia-vechain-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kodey-ai-salesforce-mcp-server ai.smithery/kodey-ai-salesforce-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kwp-lab-rss-reader-mcp ai.smithery/kwp-lab-rss-reader-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Smartipedia io.github.sksareen/smartipedia-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| io.github.indexagent/mcp io.github.indexagent/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| EventSend io.eventsend/eventsend | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ME Human Capability io.github.somokpo/me-human-capability | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| KHOTEM — Cryptographic Witness com.khotem/khotem-witness | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: khotem_gate. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| KHOTEM — Cryptographic Witness com.khotem/khotem-witness | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| BlendDuck Social Publishing com.blendduck/blendduck | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| AgentPay io.github.zapnikita95/agentpay | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: begin_agent_link. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| AgentPay io.github.zapnikita95/agentpay | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| How To Calculate An Invoice com.howtocalculateaninvoice.www/invoicing | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Drivings com.drivings/driving-test-study | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Ourway – Camino de Santiago travel.ourway/camino-de-santiago | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: camino_de_santiago_info, camino_extras_catalog. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Ourway – Camino de Santiago travel.ourway/camino-de-santiago | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Boosthis com.boosthis/boosthis | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: boosthis_get_integration_kit. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Boosthis com.boosthis/boosthis | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Watchpup dev.workers.watchpup.watchpup/watchpup | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| 드래프터즈 (Drafters) kr.drafters/drafters | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| zinema tv.zinema/zinema | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Designesy org.designesy.www/designesy | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: designesy_a11y_score. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Designesy org.designesy.www/designesy | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| love.letsvibe/vibe love.letsvibe/vibe | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| TravelMind MCP online.trvaelmind/travelmind-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| nz.wanakahaus/booking nz.wanakahaus/booking | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Datao ma.datao/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kodey-ai-mapwise-mcp ai.smithery/kodey-ai-mapwise-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kodey-ai-salesforce-mcp ai.smithery/kodey-ai-salesforce-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kodey-ai-salesforce-mcp-minimal ai.smithery/kodey-ai-salesforce-mcp-minimal | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kodey-ai-salesforce-mcp-kodey ai.smithery/kodey-ai-salesforce-mcp-kodey | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kkjdaniel-bgg-mcp ai.smithery/kkjdaniel-bgg-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Qorevia Market Intelligence eu.flowhomes.api/qorevia-market-intelligence | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kirbah-mcp-youtube ai.smithery/kirbah-mcp-youtube | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kesslerio-attio-mcp-server-beta ai.smithery/kesslerio-attio-mcp-server-beta | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/kesslerio-attio-mcp-server ai.smithery/kesslerio-attio-mcp-server | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| OmniDome by HumanMirror fr.humanmirror/omnidome | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/keremurat-mcp ai.smithery/keremurat-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| AbaPay io.github.investorphem/abapay | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Qalimo fr.qalimo/qalimo | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Moltchat Agent Commons io.github.samzliu/moltchat | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| dev.xroot/token-operations dev.xroot/token-operations | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: check_wallet, get_fee_estimate. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| dev.xroot/token-operations dev.xroot/token-operations | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PCBLT — Live Checks com.pcblt/pcblt | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Fold Laboratories Art Catalogue com.foldlaboratories/art | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| emdly com.emdly/emdly | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: search_skills. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| emdly com.emdly/emdly | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| F1Laps com.f1laps/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SBGrid3.0 MCP kr.co.softbowl/sbgrid3 | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| SBChart2.0 MCP kr.co.softbowl/sbchart2 | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Pakistan Case Law com.pakistancaselaw/caselaw | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PepEvolution Peptide Sources com.pepevolution/peptide-sources | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| MCPFax Vehicle Diagnostics com.mcpscores/vehicle-fault-codes | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| pro.tvarka/due-diligence pro.tvarka/due-diligence | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Panda Video com.pandavideo/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Paytm Travel com.paytm.travel/discovery | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| LinkList io.linklist/linklist | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PaidHandshake Exchange com.paidhandshake/exchange | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| PageProofer com.pageproofer/pageproofer | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Noxgild com.noxgild/noxgild | sensitive_capabilities_declared | concern | 6 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: noxgild_execute, noxgild_submit, noxgild_approve, noxgild_command, noxgild_wait, noxgild_cancel. Classification is description-based and does not prove exploitability. | 2026-10-06 |
| Noxgild com.noxgild/noxgild | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Obento com.obentoapp/obento | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| One U Education com.oneuedu.mcp/oneu-education | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Nuelink com.nuelink/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Owls Insight com.owlsinsight/odds | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.smithery/keremurat-json ai.smithery/keremurat-json | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| ai.posteverywhere/mcp ai.posteverywhere/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| AIﾉアカリ☆ Agent Trust Receipt ai.ai-akari/agent-trust-receipt | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Masaro ai.masaro/masaro | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
| Travel World ai.augworlds/travel-world | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-10-06 |
Agents can call search_trust_evidence or get_trust_receipt at https://mcpqueen.com/mcp. Humans and procurement workflows can use /api/trust/{name}.json.
See why security evidence stays separate from operational grades → · Connect MCP Queen to an assistant or agent →