# MCP Server Security Hub

> Free public tool by Backslash Security. Risk scores for 80,000+ MCP servers.

## What this is
Browse security scores for every public MCP server. Each server is assessed for hidden instructions, excessive permissions, remote code execution, and malicious behavior.

Search any MCP server by name, identifier, or GitHub repo to see its risk score and findings. No signup required.

## Key facts
- 80,000+ public MCP servers assessed.
- Research on the 8,000 most popular MCP servers found 29% carry at least one security risk finding, and 6 had confirmed unintended remote code execution.
- Popularity is not a safety signal — vet every MCP server before connecting it to an AI agent.
- Free, no signup, no account required.

## How Backslash assesses MCP server security
Backslash parses each MCP server's source code and declared tools, looking for shell injection, remote code execution, hidden instructions, excessive permissions, and behavior that exceeds what the server advertises. The hub shows risk scores and findings for every scanned server.

## Related
- Backslash main site: https://www.backslash.security/
- MCP Security use case: https://www.backslash.security/use-cases/mcp-security
- MCP research blog: https://www.backslash.security/blog/mcp-server-security-risks-research
- Skills Security Scanner: https://skills.backslash.security/
- Claw-Hunter: https://github.com/backslash-security/Claw-Hunter
- Backslash llms.txt: https://www.backslash.security/llms.txt