Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF
Free
4 servers across security & testing. The largest is Owasp Scan.
Security & Testing
4
servers published
1 category
2k
downloads
counted by the registries
0
followers
told when a release lands
4 of 4
security-scanned
servers with a scan grade
4 MCP servers, most downloaded first. 4 of 4 are free to start.
OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks
Free
OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit
Free
GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection
Free
Authentication
0 of 4 use OAuth
The rest either hold an API key issued by the publisher or ask for nothing.
Support
Community publisher
Listed without a verification tick. Read the listing before installing.