Use this evidence before connecting an agent to an unfamiliar MCP server. MCP Queen publishes dated observations about protocol authentication boundaries and security-sensitive capabilities, while keeping them separate from operational grades.
This surface supports MCP inventory review, allowlist decisions, vendor due diligence, and change monitoring. It does not claim that metadata inspection proves a server safe. Source-code scanning, deployment controls, least privilege, runtime monitoring, and human approval remain necessary for privileged tools.
200+ recent public security/access observations
| Server | Observation | Status | Evidence | Observed |
|---|---|---|---|---|
| ONE HEART eSIM com.oneheartesim.mcp/esim | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| NatGasLens — US Natural Gas & Henry Hub Data com.natgaslens/natgaslens | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: get_us_lng_feedgas. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| NatGasLens — US Natural Gas & Henry Hub Data com.natgaslens/natgaslens | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Spectral — verified-knowledge oracle com.seespectral/oracle | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Muze Ecommerce Ads com.muzecmo/ecommerce-ads | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| lahend.ee — Estonian court decisions io.github.Nimistu/lahend-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Sicredi MCP io.github.mcp-dir/sicredi-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Sicredi MCP io.github.mcp-dir/sicredi-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Sicoob MCP io.github.mcp-dir/sicoob-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Sicoob MCP io.github.mcp-dir/sicoob-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Santander MCP io.github.mcp-dir/santander-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Santander MCP io.github.mcp-dir/santander-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Sam's Club MCP io.github.mcp-dir/samsclub-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Sam's Club MCP io.github.mcp-dir/samsclub-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| SafraPay MCP io.github.mcp-dir/safrapay-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| SafraPay MCP io.github.mcp-dir/safrapay-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Rico MCP io.github.mcp-dir/rico-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Rico MCP io.github.mcp-dir/rico-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Safra MCP io.github.mcp-dir/safra-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Safra MCP io.github.mcp-dir/safra-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| RecargaPay MCP io.github.mcp-dir/recargapay-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| RecargaPay MCP io.github.mcp-dir/recargapay-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Rede Celcoin MCP io.github.mcp-dir/redecelcoin-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Rede Celcoin MCP io.github.mcp-dir/redecelcoin-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| RD Station io.github.mcp-dir/rdstation-mcp | sensitive_capabilities_declared | concern | 4 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: rdstation_webhooks_list, rdstation_webhooks_create, rdstation_webhooks_delete, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| RD Station io.github.mcp-dir/rdstation-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| QI SCD MCP io.github.mcp-dir/qiscd-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| QI SCD MCP io.github.mcp-dir/qiscd-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Procfy io.github.mcp-dir/procfy-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Procfy io.github.mcp-dir/procfy-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Porto Bank MCP io.github.mcp-dir/portobank-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Porto Bank MCP io.github.mcp-dir/portobank-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Player's Bank MCP io.github.mcp-dir/playersbank-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Player's Bank MCP io.github.mcp-dir/playersbank-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| PicPay MCP io.github.mcp-dir/picpay-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| PicPay MCP io.github.mcp-dir/picpay-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco PAN MCP io.github.mcp-dir/pan-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco PAN MCP io.github.mcp-dir/pan-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Pague Veloz Serasa MCP io.github.mcp-dir/paguevelozserasa-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Pague Veloz Serasa MCP io.github.mcp-dir/paguevelozserasa-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| PagSeguro io.github.mcp-dir/pagseguro-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| PagSeguro io.github.mcp-dir/pagseguro-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| PagBank MCP io.github.mcp-dir/pagbank-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| PagBank MCP io.github.mcp-dir/pagbank-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Pagar.me io.github.mcp-dir/pagarme-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: pagarme_legacy_list_payables, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Pagar.me io.github.mcp-dir/pagarme-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Omie io.github.mcp-dir/omie-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Omie io.github.mcp-dir/omie-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Nubank MCP io.github.mcp-dir/nubank-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Nubank MCP io.github.mcp-dir/nubank-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Olist Tiny ERP io.github.mcp-dir/olist-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Olist Tiny ERP io.github.mcp-dir/olist-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Nuvemshop io.github.mcp-dir/nuvemshop-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Nuvemshop io.github.mcp-dir/nuvemshop-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| NotebookLM io.github.mcp-dir/notebooklm-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| NotebookLM io.github.mcp-dir/notebooklm-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| IntentWake Audience Intelligence com.intentwake/intentwake | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Nusii MCP Server com.nusii/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Flipnem com.flipnem/flipnem | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| GTD Brain com.gtdbrain/gtd-brain | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| CarteleraCines.es es.carteleracines/cartelera | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Nota Fiscal io.github.mcp-dir/notafiscal-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Nota Fiscal io.github.mcp-dir/notafiscal-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Next MCP io.github.mcp-dir/next-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Next MCP io.github.mcp-dir/next-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Neon MCP io.github.mcp-dir/neon-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Neon MCP io.github.mcp-dir/neon-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Necton MCP io.github.mcp-dir/necton-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Necton MCP io.github.mcp-dir/necton-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Monte Bravo MCP io.github.mcp-dir/montebravo-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Monte Bravo MCP io.github.mcp-dir/montebravo-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Midway MCP io.github.mcp-dir/midway-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Midway MCP io.github.mcp-dir/midway-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| MFIT Personal io.github.mcp-dir/mfit-mcp | sensitive_capabilities_declared | concern | 5 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: mfit_client_files_delete, mfit_workout_delete_routine, mfit_workout_delete_session, mfit_workout_delete_exercise, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| MFIT Personal io.github.mcp-dir/mfit-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Microvix io.github.mcp-dir/microvix-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Microvix io.github.mcp-dir/microvix-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco Mercantil MCP io.github.mcp-dir/mercantil-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco Mercantil MCP io.github.mcp-dir/mercantil-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Mercado Pago MCP io.github.mcp-dir/mercadopago-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Mercado Pago MCP io.github.mcp-dir/mercadopago-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Mercado Financeiro BR io.github.mcp-dir/mercado-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Mercado Financeiro BR io.github.mcp-dir/mercado-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Méliuz MCP io.github.mcp-dir/meliuz-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Méliuz MCP io.github.mcp-dir/meliuz-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco Master MCP io.github.mcp-dir/master-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco Master MCP io.github.mcp-dir/master-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| LibreLink Up B2B (CGM clínica) io.github.mcp-dir/librelink_business-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| LibreLink Up B2B (CGM clínica) io.github.mcp-dir/librelink_business-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| LibreLink Up (CGM) io.github.mcp-dir/librelink-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| LibreLink Up (CGM) io.github.mcp-dir/librelink-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Kiwify io.github.mcp-dir/kiwify-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Kiwify io.github.mcp-dir/kiwify-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Itaú MCP io.github.mcp-dir/itau-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Itaú MCP io.github.mcp-dir/itau-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Legal MCP (alternativa ao Jusbrasil) io.github.mcp-dir/jusbrasil-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Legal MCP (alternativa ao Jusbrasil) io.github.mcp-dir/jusbrasil-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Inter MCP io.github.mcp-dir/inter-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Inter MCP io.github.mcp-dir/inter-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Íon MCP io.github.mcp-dir/ion-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Íon MCP io.github.mcp-dir/ion-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| InfinitePay MCP io.github.mcp-dir/infinitepay-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| InfinitePay MCP io.github.mcp-dir/infinitepay-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| INPI io.github.mcp-dir/inpi-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| INPI io.github.mcp-dir/inpi-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Hotmart io.github.mcp-dir/hotmart-mcp | sensitive_capabilities_declared | concern | 5 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: hotmart_sales_history, hotmart_sales_summary, hotmart_coupons_write_create, hotmart_coupons_write_delete, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Hotmart io.github.mcp-dir/hotmart-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Getnet io.github.mcp-dir/getnet-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Getnet io.github.mcp-dir/getnet-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| iFood io.github.mcp-dir/ifood-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| iFood io.github.mcp-dir/ifood-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Specularis AI Visibility Audit io.github.AdevAarons/specularis-mcp-audit | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| cars-data.com — Car Specs API com.cars-data/car-specs-api | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| PaperDock dev.paperdock/paperdock | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Boxkite — Xero Backup & Export com.getboxkite/xero-backup-export | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Agent Observatory Digital Twin com.virus-alert/agent-observatory | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: rotate_service_token. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Agent Observatory Digital Twin com.virus-alert/agent-observatory | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Betterlytics io.betterlytics/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| dev.agentopskit/constitution-lint dev.agentopskit/constitution-lint | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| dev.dnsdoctor/dns-doctor dev.dnsdoctor/dns-doctor | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Garmin Connect (treinos) io.github.mcp-dir/garmin-mcp | sensitive_capabilities_declared | concern | 3 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: garmin_delete_workout, garmin_unschedule_workout, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Garmin Connect (treinos) io.github.mcp-dir/garmin-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Feegow Clinic io.github.mcp-dir/feegow-mcp | sensitive_capabilities_declared | concern | 5 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: feegow_appointment_write_create, feegow_appointment_write_cancel, feegow_appointment_write_reschedule, feegow_appointment_write_update_status, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Feegow Clinic io.github.mcp-dir/feegow-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Tabela FIPE io.github.mcp-dir/fipe-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Tabela FIPE io.github.mcp-dir/fipe-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| F360 Finanças io.github.mcp-dir/f360-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| F360 Finanças io.github.mcp-dir/f360-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| EQI MCP io.github.mcp-dir/eqi-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| EQI MCP io.github.mcp-dir/eqi-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Dock MCP io.github.mcp-dir/dock-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Dock MCP io.github.mcp-dir/dock-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco Digio MCP io.github.mcp-dir/digio-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco Digio MCP io.github.mcp-dir/digio-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| DietBox io.github.mcp-dir/dietbox-mcp | sensitive_capabilities_declared | concern | 3 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: dietbox_patient_delete, dietbox_antropometria_delete, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| DietBox io.github.mcp-dir/dietbox-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| DataJud (CNJ) io.github.mcp-dir/datajud-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| DataJud (CNJ) io.github.mcp-dir/datajud-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Crefisa MCP io.github.mcp-dir/crefisa-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Crefisa MCP io.github.mcp-dir/crefisa-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| CPlug (ConnectPlug) io.github.mcp-dir/cplug-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| CPlug (ConnectPlug) io.github.mcp-dir/cplug-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Conta Simples io.github.mcp-dir/contasimples-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: contasimples_user_write_delete, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Conta Simples io.github.mcp-dir/contasimples-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Conta Bemol MCP io.github.mcp-dir/contabemol-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Conta Bemol MCP io.github.mcp-dir/contabemol-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Clear MCP io.github.mcp-dir/clear-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Clear MCP io.github.mcp-dir/clear-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| CNPJ io.github.mcp-dir/cnpj-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| CNPJ io.github.mcp-dir/cnpj-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Carrefour MCP io.github.mcp-dir/carrefour-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Carrefour MCP io.github.mcp-dir/carrefour-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Caixa Tem MCP io.github.mcp-dir/caixatem-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Caixa Tem MCP io.github.mcp-dir/caixatem-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| io.github.Prophet-git/one-brain io.github.Prophet-git/one-brain | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Caixa Econômica Federal MCP io.github.mcp-dir/caixa-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Caixa Econômica Federal MCP io.github.mcp-dir/caixa-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| FakeOut Kitchen Recipe Intelligence io.github.PhotoRomano/mcp-recipe | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| C6 Bank MCP io.github.mcp-dir/c6-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| C6 Bank MCP io.github.mcp-dir/c6-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| TownRoster Local Business Intelligence io.github.PhotoRomano/mcp-local-business | authentication_boundary | observed | Live protocol probe observed auth_state=auth-bare. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| com.agishub/web-scraper com.agishub/web-scraper | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco BRB MCP io.github.mcp-dir/brb-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| BV MCP io.github.mcp-dir/bv-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| BTGPactual MCP io.github.mcp-dir/btg-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=unreachable. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Vérifier ma facture (Factur-X) fr.verifier-ma-facture/validateur | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| SWIPIFY fr.swipify/facturation | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Origami Entreprises fr.origami-entreprises/origami | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Ansvar: Spanish Law eu.ansvar/spanish-law | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Ansvar: Polish Law eu.ansvar/polish-law | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Ansvar: Italian Law eu.ansvar/italian-law | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| com.bids44/marketplace com.bids44/marketplace | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| dev.replit.kirk.91eaaf4b-0a31-4f81-971a-86dc09a31986-00-2a9kujnvh541f-mwardvi0/marz-greta-lock-network dev.replit.kirk.91eaaf4b-0a31-4f81-971a-86dc09a31986-00-2a9kujnvh541f-mwardvi0/marz-greta-lock-network | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| toolvend - DNS, WHOIS & domain tools dev.toolvend/dns-whois-domain-tools | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: extract. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| toolvend - DNS, WHOIS & domain tools dev.toolvend/dns-whois-domain-tools | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Ansvar: French Law eu.ansvar/french-law | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| CoworkingView com.coworkingview/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| CaudexCatena MCP com.caudexcatena/caudexcatena-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| AgentFilings com.agentfilings/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| com.auto-reader/ocr com.auto-reader/ocr | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| 1inch MCP com.1inch.business/mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| cloud.serpent/salesforce-devops cloud.serpent/salesforce-devops | authentication_boundary | observed | Live protocol probe observed auth_state=auth-wellbehaved. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| FlatCash — Native Currency for AI Agents cash.flat/flatcash | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Bradescard MCP io.github.mcp-dir/bradescard-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Bradescard MCP io.github.mcp-dir/bradescard-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Bradesco MCP io.github.mcp-dir/bradesco-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Bradesco MCP io.github.mcp-dir/bradesco-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco do Nordeste do Brasil MCP io.github.mcp-dir/bnb-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco do Nordeste do Brasil MCP io.github.mcp-dir/bnb-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco Bmg MCP io.github.mcp-dir/bmg-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco Bmg MCP io.github.mcp-dir/bmg-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banrisul MCP io.github.mcp-dir/banrisul-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banrisul MCP io.github.mcp-dir/banrisul-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Bity io.github.mcp-dir/bity-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Bity io.github.mcp-dir/bity-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Bling io.github.mcp-dir/bling-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Bling io.github.mcp-dir/bling-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Banco do Brasil MCP io.github.mcp-dir/bb-mcp | sensitive_capabilities_declared | concern | 2 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: openfinance_search_bank_connectors, marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
| Banco do Brasil MCP io.github.mcp-dir/bb-mcp | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. | 2026-08-06 |
| Investidor B3 io.github.mcp-dir/b3-mcp | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: marketplace. Classification is description-based and does not prove exploitability. | 2026-08-06 |
Agents can call search_trust_evidence or get_trust_receipt at https://mcpqueen.com/mcp. Humans and procurement workflows can use /api/trust/{name}.json.
See why security evidence stays separate from operational grades → · Connect MCP Queen to an assistant or agent →