MCP Scanner

mcpqueen

https://mcpqueen.com/mcp · scanned 2026-10-17

None of its 7 tools were flagged. They read like lookups and searches.

0/ 100 · heuristic risk · Low

7 tools · 0 flagged

  • Runs code or commands0
  • Moves money0
  • Touches credentials0
  • Deletes0
  • Sends data out0
  • Exports data0
  • Writes or changes0
  • get_server_grade0 · Low

    Get the full grade and verbatim probe evidence for one MCP server, by its official registry name (e.g. 'com.healthai/radar').

  • get_trust_receipt0 · Low

    Get one MCP server's complete evidence receipt: operational grade, deterministic security/data-integrity/citation/claim observations, and reviewed real-usage field reports. Missing observations are explicitly unaudited, never treated as a pass.

  • list_grades0 · Low

    List the top graded MCP servers from the mcpqueen registry (deterministic probe grades with evidence). Returns grade, score 0-100, latency, tool count and auth state per server.

  • search_servers0 · Low

    Search the MCP evidence registry using a natural multi-word task (e.g. 'reliable no-auth drug interaction server with citations'). Tokenizes and expands common synonyms, ranks metadata plus observed tool descriptions, and supports operational-grade/auth/latency/category filters. Use get_trust_recei…

  • search_tools0 · Low

    Search across the actual tools that graded MCP servers expose (their tool names and descriptions, captured live from tools/list) — not just server metadata. Use this when you need a specific capability or data type, e.g. 'get weather', 'query postgres', 'device recall', 'FDA 510k'. Returns the matc…

  • search_trust_evidence0 · Low

    Search published MCP trust evidence and reviewed real-usage field reports. Use for questions such as which servers expose citations, have access caveats, make unverifiable corpus claims, or show security concerns. Returns verbatim observations with dates and source type, not a synthetic trust score.

  • submit_feedback0 · Low

    Submit a field report about an MCP server you have actually used (what worked, what failed, surprising behavior). Reports are quarantined for human review and never auto-published.

Vulnify checks each tool call before it runs: ALLOW, REVIEW or BLOCK, with the reason logged.

Badge for your README

Scanned by Vulnify
Markdown
[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/mcpqueen-com-mcp.svg)](https://www.vulnify.io/scanner/mcpqueen-com-mcp?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.