MCPWatch
Have I Been Pwned for MCP servers. Continuously audits every public MCP server on the internet — security + performance — and publishes a public letter-grade leaderboard.
Status: MVP in progress · launching 2026-04-13
Why
- 30 CVEs in MCP servers in the last 60 days
- 43% of public MCPs are vulnerable to command injection
- 82% to path traversal
- No public, continuously-updated registry of MCP trust
- Teams are installing random MCPs without any safety signal
MCPWatch fills that gap.
What it does
- Crawler — scheduled Cloudflare Worker that polls Smithery, npm, the official MCP registry, and GitHub topics daily
- Scanner — runs 10 automated checks derived from OWASP MCP Top 10 on every discovered server
- Benchmark (phase 2) — measures task-completion lift when agent has this MCP installed vs not
- Public leaderboard —
mcpwatch.dev— letter grades A–F, searchable, historical diffs - CLI —
npx @mcpwatch/cli audit <server>— local scan before you install - Enterprise API — webhook alerts + bulk audit + private MCP scanning ($99/mo)
The 10 Checks (OWASP MCP Top 10 aligned)
| # | Check | Severity |
|---|---|---|
| 1 | Command injection in tool handlers | Critical |
| 2 | Path traversal in file tools | Critical |
| 3 | Unauthenticated mutations | Critical |
| 4 | Prompt injection via tool descriptions | High |
| 5 | SSRF in URL-fetching tools | High |
| 6 | Secret leakage in error messages | High |
| 7 | Over-permissive filesystem scopes | Medium |
| 8 | Missing rate limits | Medium |
| 9 | Outdated dependencies with known CVEs | Medium |
| 10 | Missing schema validation on inputs | Low |
Architecture
mcpwatch/
├── packages/
│ ├── scanner/ # Core check engine (TypeScript, runs in Worker + CLI + Node)
│ └── cli/ # @mcpwatch/cli — npx runnable
├── workers/
│ └── crawler/ # CF Worker — scheduled crawl + scan job
├── apps/
│ └── web/ # Next.js/Astro static → CF Pages — mcpwatch.dev
├── content/ # Launch blog, HN post, X thread
└── scripts/ # One-shot bootstrap + data backfill
Roadmap
- T+0 (today): scanner core + 3 working checks, CLI, static leaderboard shell
- T+24h: crawler deployed, seed data for 50 top MCP servers, landing page live
- T+48h: launch — HN post, X thread, Anthropic + OWASP cc
- T+1w: 500 servers audited, first enterprise inquiry
- T+1m: MCPBench integration (phase 2)
License
MIT — use it, fork it, contribute checks.