Operational grades show whether a server connects and describes usable tools. Separate Trust Receipts show what has actually been observed about security and access boundaries, data integrity, citations, advertised claims, response quality, and real-world use.
44 matches. Categories are keyword-derived from registry metadata — imperfect by design, deterministic by principle.
| # | Server | Grade | Score | Tools |
|---|---|---|---|---|
| 1 | co.launchtrust/launchtrust LaunchTrust |
A | 100 | 9 |
| 2 | com.onchaindiligence/compliance OnchainDiligence |
A | 100 | 5 |
| 3 | ai.helixar/mcp Helixar Security |
A | 98 | 2 |
| 4 | ai.thinkneo/control-plane ThinkNEO Control Plane |
A | 97 | 68 |
| 5 | cloud.nttzen.secdb/zen-secdb ZEN SecDB |
A | 97 | 11 |
| 6 | com.bidda/bidda-compliance | A | 97 | 25 |
| 7 | com.bonissystems/compliance-batch Compliance Batch Alignment |
A | 97 | 1 |
| 8 | com.bonissystems/ofac-sdn-screening OFAC SDN Screening |
A | 97 | 2 |
| 9 | com.dropwatchhq/compliance-evidence | A | 97 | 4 |
| 10 | com.dropwatchhq/compliance-radar | A | 97 | 4 |
| 11 | com.lionx402/lion-x402 LION — Verified Company & Compliance Data |
A | 97 | 8 |
| 12 | com.geiant/mcp-agentcore | A | 93 | 3 |
| 13 | com.continueops/continueops-public ContinueOps Public MCP |
B | 87 | 7 |
| 14 | ai.scamverify/mcp ScamVerify Threat Verification |
C prov. | 66 | — |
| 15 | com.avalara/avatax Avalara AvaTax |
C prov. | 66 | — |
| 16 | com.avalara/classification Avalara Classification |
C prov. | 66 | — |
| 17 | com.avalara/cross-border Avalara Cross-Border |
C prov. | 66 | — |
| 18 | com.avalara/returns Avalara Returns |
C prov. | 66 | — |
| 19 | com.coachwatts/coach-watts Coach Watts |
C prov. | 66 | — |
| 20 | com.onkernel/kernel-mcp-server | C prov. | 66 | — |
| 21 | com.pentest-tools/mcp-server | C prov. | 66 | — |
| 22 | ai.byteray/byteray-mcp ByteRay AI |
C prov. | 62 | — |
| 23 | app.clearpolicy/clearpolicy ClearPolicy |
C prov. | 62 | — |
| 24 | app.locize.mcp/server Locize |
C prov. | 62 | — |
| 25 | app.openclip/openclip OpenClip |
C prov. | 62 | — |
| 26 | com.ecovanmove/booking Eco Van Move Booking |
C prov. | 62 | — |
| 27 | com.httpstatus/mcp-server | C prov. | 62 | — |
| 28 | com.johnsessentials/johns-essentials John's Essentials |
C prov. | 62 | — |
| 29 | ai.bluenexus/universal-mcp BlueNexus Universal MCP |
D prov. | 57 | — |
| 30 | ai.rfp/rfp-ai RFP.ai |
D prov. | 57 | — |
| 31 | com.jeikin/mcp Jeikin |
D prov. | 54 | — |
| 32 | com.missingmcp/whoop WHOOP — MissingMCP |
D prov. | 54 | — |
| 33 | ai.aisecuritygateway/mcp-gateway AI Security Gateway — MCP Gateway |
D prov. | 49 | — |
| 34 | au.com.appgenie/compliance-mcp AppGenie Compliance MCP |
F prov. | 35 | — |
| 35 | ai.clarid/compliance Clarid Compliance |
F | 15 | — |
| 36 | com.cinderfi/retirement-planning Cinderfi — Retirement Planning |
F | 15 | — |
| 37 | com.clauxel.mcpoauthscopegate/mcpoauthscopegate-mcp | F | 15 | — |
| 38 | ai.complyhat/compliance ComplyHat |
F | 12 | — |
| 39 | app.eurocomply/compliance EuroComply — EU Regulatory Compliance |
F | 12 | — |
| 40 | com.axiomseal/axiomseal | F | 12 | — |
| 41 | com.brightsec/mcp Bright Security |
F | 12 | — |
| 42 | com.exploit-intel/eip-mcp Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database |
F | 12 | — |
| 43 | com.opzyai/scan Opzyai Vibe Check |
F | 12 | — |
| 44 | com.dynsuplabs/mcp-compliance-preflight MCP Compliance Preflight |
F | 5 | — |
Claim your live grade badge for your README, and get an email the moment your grade moves or your endpoint stops answering — find your server above and hit Watch. Free while in beta.
Ask the queen before you connect to a stranger:claude mcp add --transport http mcpqueen https://mcpqueen.com/mcp
Evidence-backed shortlists for high-intent decisions—not generated pages for every keyword.
Data & DatabasesWeb & SearchScience & HealthFinance & CryptoDev & Code Security & trust evidence
Each server is probed live over streamable HTTP: reachability (25) — does initialize succeed; auth-gated servers earn partial credit only if they advertise WWW-Authenticate so clients can discover OAuth. protocol (15) — valid JSON-RPC handshake; deprecated SSE transport is penalized. tooling (35) — tools/list works, share of tools with descriptions and fully-typed input schemas, median description depth. latency (10) — initialize round-trip. provenance (15) — registry metadata completeness and whether the reverse-DNS namespace actually matches the serving domain. Scores scale to what is verifiable; unverifiable dimensions mark the grade provisional rather than guessing. Every point carries the verbatim observation that earned it. No stars, no votes, no pay-to-rank — probes only.
Trust Receipts are separate from the operational grade. Discovery records advertised security-sensitive capabilities, access caveats, citation promises, and corpus-size claims. Safe, read-only response audits sample eligible tools and test whether calls are usable, whether returned PMIDs/DOIs resolve against authoritative sources, and whether an apparently successful response actually contains an upstream error. Every observation includes its date, source type, sample size where applicable, and methodology version. No synthetic trust score is assigned, and absence of an observation means unaudited—not safe.
Get an email when a server's grade changes or its endpoint stops answering. Double-opt-in, one-click unwatch, free while in beta.