Weekly insights on the MCP ecosystem - new servers, trending projects, security alerts, and deep dives. All auto-generated from real data.
A revoked emSign root trusted by uv versions before 0.13.4 lets attackers forge TLS certs for any hostname, exposing peil-mcp installs to MITM.
This week's MCP roundup covers 52,584 total servers, standout newcomers like Smart Drawio Next, and a trending list led by Rea's explosive 17,790-star gain.
CVE-2026-86063 lets attackers bypass Claude Code's plugin hash pinning via a cleverly named git branch, while CVE-2026-59951 leaves MCP Python SDK servers open to unbounded memory growth.
3,046 new MCP servers landed this week — here's which ones actually scored well versus which just went viral.
PraisonAI MCP Server disclosed ten vulnerabilities in two days, including arbitrary code execution via AICoder and f-string injection in its deploy generator.
Two high-severity Nx Dev advisories plus a Jupyter MCP clipboard XSS bug — what's affected and what to patch right now.
A weekly look at the MCP ecosystem's fastest-growing new servers and trending projects, and why star count and quality score keep diverging.
Eight high-severity pypdf denial-of-service CVEs landed against one MCP server, plus two Electron sandbox-escape bugs in another — here's what to patch.
Two new advisories hit Dbhub: a critical DNS-rebinding flaw exposing unauthenticated SQL execution, and a high-severity bug where the readonly flag never actually enforces read-only access.
A single disclosure batch exposes nine vulnerabilities in mcp-atlassian, from a token check that accepts any string to an RCE-capable path traversal bypass.
Two unauthenticated Next.js RCEs hit one MCP server while an NLTK regex flaw threatens denial-of-service on another — here's what to patch now.
Three high-severity advisories hit MCP servers this cycle — a WebSocket auth bypass in Cline's dashboard and two remote-code-execution bugs in NLTK.
A critical remote code execution flaw in OmniRoute's custom-agent registration endpoint lets attacker-controlled input reach execFileSync — here's what to check and do now.
CVE-2026-61647 lets prompt-injected input write arbitrary files via notebooklm-mcp's vault_batch tool — here's what's exposed and how to contain it.
Mcp Gitlab has four new security advisories, three critical, including a path to full GitLab account takeover — and no patches yet.
CVE-2026-40072 lets contracts trigger SSRF via CCIP Read; CVE-2026-27735 lets git_add stage files outside the repo. Both rated high severity — patch now.
Two high-severity CVEs in FastMCP's OAuth Proxy — a Confused Deputy flaw and cross-server token reuse — affect Krita MCP and any server using OAuthProxy.
A vLLM RCE that bypasses trust_remote_code, plus two MCP Python SDK flaws around WebSocket origin checks and session hijacking — all rated high severity.
A high-severity git worktree bug let attackers escape Claude Code's seatbelt sandbox via a malicious repo clone — here's what to check.
CVE-2026-37004 lets unauthenticated attackers execute arbitrary OS commands on Ogham Mcp via an unsandboxed Jinja2 template injection in /prompts/test.
A critical unauthenticated SQL execution bug in mysql_mcp_server's SSE mode headlines a six-advisory week that also hit n8n with five High-severity CVEs.
A critical libheif vulnerability in Astro's default image optimizer enables remote code execution via malicious AVIF files; com.sigaoli/profile is affected and needs Astro 7.2.8+.
37,836 MCP servers and counting — this week's standouts pair record growth with a new wave of tools built to catch AI agents lying.
CVE-2026-82392 and CVE-2026-82393 let attacker-controlled lockfiles or tarball manifests write files outside node_modules, affecting the Arcmira MCP server.
A high-severity pnpm vulnerability lets a malicious repo exfiltrate NPM_TOKEN and GITHUB_TOKEN via proxy settings, hitting 10 MCPpedia-listed servers.
Tachyon is a Java/Kotlin MCP runtime with native Netty transports and a perfect security score, built for teams who don't want to leave the JVM for MCP.
CVE-2026-55640 exposes an unauthenticated webhook in Nextcloud MCP Server that lets attackers delete any user's vector embeddings when WEBHOOK_SECRET is left unset.
Critical and high-severity auth bypasses in PraisonAI MCP server. Unauthenticated job execution, CSRF, and WebSocket hijacking. Immediate action required.
Two CRITICAL RCE flaws in ContextForge and a zero-auth bypass in Deepseek hit this week. If you're running either server, patch now—or isolate it immediately.
This week's MCP roundup: 35,074 total servers, a JVM runtime worth watching, a metering server that solves billing, and a trending list with a data quality problem.
Five critical CVEs affecting Contentful, FAF, Python AI Kit, and JupyterLab MCP servers dropped this week—all allow credential theft or code execution.
We scored every live MCP server in the catalog. The median is 30/100, 78% land under 50, and the single biggest reason isn't bad code — it's missing metadata. Here are the numbers, with the caveats.
MCP servers get handed your shell, your database, and your credentials. Here's exactly how MCPpedia audits one — all nine security checks, the point values, and what each one can't catch.
The MCP catalog crossed 26,000 servers, AI-ML quietly became the biggest category, and a handful of servers pull 13M+ weekly downloads with barely any stars. Here's what the data says.
Critical RCE and IDOR vulnerabilities exposed in MCPin10. Two critical, one high-severity. Unauthenticated DoS also disclosed.
Token compression is dominating this week's trending MCP servers. Headroom gained 3,423 stars. Here's why developers are finally solving for efficiency, not features.
12 tools covering sandbox testing, live sending, templates, logs, and stats — with a perfect security score.
Two HIGH-severity SSRF and DoS vulnerabilities hit Searxng; a CRITICAL OS command injection flaw found in Gemini Tool. Update immediately.
June 2026 disclosure hits espresso-mcp with PATH hijacking, env poisoning, and auth bypass flaws. All high severity. Patch immediately.
PraisonAI MCP server disclosed with 3 critical RCE vulnerabilities, 7 high-severity auth bypasses, and arbitrary file access. Production deployments must be isolated immediately.
The MCP ecosystem hit 23,812 servers this week. We cut through the noise to find the debuts and trends worth your attention.
Header leakage, privilege escalation, and three yt-dlp RCE flaws affect popular MCP servers. Patches available—get them today.
CVE-2026-48746 strips API key auth entirely; CVE-2026-41523 enables arbitrary code execution. Patch Llm Server Docs now or assume compromise.
This MCP server wires Finland's entire StatFin database into your AI client — 3,000+ tables, zero credentials required.
Headroom gained 1,513 stars by compressing LLM context 60-95%. Here's why efficiency, data access, and workflow orchestration are the real trends in 2025.
High-severity vulnerability (GHSA-gv7w-rqvm-qjhr) in MermAId's esbuild Deno module allows RCE via unverified binary downloads. Patch immediately.
This week's MCP ecosystem roundup: 25,966 total servers, dbx gains 253 stars, and a server that scores other MCP servers for trustworthiness.
Trvl Mcp routes flights, hotels, trains, and more through a single MCP tool with 65 aliases — no API keys required.
A 90/100-scoring TypeScript MCP server with dual transports, 42 tests, Docker, and CI — built to be cloned and templated.
Headroom gains 1,425 stars as developers race to solve token inflation. Compression and web scraping tools rule the trending charts.
The MCP ecosystem hit 24,973 servers this week. Here's what's worth your attention: browser memory sync, context compression, and vertical integrations.
Pictify's MCP server gives AI agents 31 tools to generate images, GIFs, and PDFs — plus a full A/B testing loop for visual content.
Headroom gained 1,609 stars in a week. Two compression tools cracked the top 3. The MCP community is solving context bloat.
vatnode-mcp brings EU VIES validation, offline format checks, and full rate data for 45 countries into one 89-score MCP server.
The MCP catalog hit 23,931 servers this week. Here's what's worth your attention: from Inkscape control to Rust-secured local tools.
Apify's Actors MCP Server scores 94/100 and lets AI agents dynamically discover and run web scraping tools mid-conversation.
AiToEarn, Claude Flow, Caveman Shrink, and Firecrawl led a 4,010-star week — and the pattern reveals where AI infrastructure is heading.
This MCP server brings cryptographic signing and HMAC attestation to agent-to-agent task delegation — scoring a perfect 30 on security.
The MCP ecosystem hit 22,171 servers this week. We break down the new arrivals and trending projects worth your attention.
Datto SaaS Protection gets an MCP server — 9 tools for M365/GWS backup management, restores, and license tracking.
Ruflo gained 1,499 stars, ByteDance swept four spots at once, and Firecrawl hit 118K. This week's trending MCP servers share one theme: autonomous agents.
With 1,216 stars and a 96/100 score, Antigravity turns any codebase into a queryable AI assistant — with real file paths and line numbers.
The MCP ecosystem hit 21,152 servers this week. The new additions reveal a sharp pivot: AI agent ops tooling is arriving fast.
Swatchbook MCP exposes DTCG design tokens, axes, and diagnostics to AI agents — no Storybook required. An 88/100 early-stage gem.
E2eval tests AI agents against real tasks and real tools — then scrubs the source evidence so they can't cheat their way to the right answer.
Ruflo gained 2,689 stars in 7 days. Here's what this week's trending MCP servers say about where AI development is heading.
The MCP ecosystem hit 20,413 total servers this week. We cut through the noise to find what's actually worth your attention.
Vitemcp scores 92/100 with a perfect 30/30 security rating — here's why it's the go-to TypeScript framework for production MCP servers.
PostHog leads this week's MCP star surge, but the real story is a pattern: developers are using MCP to solve the AI context problem.
End Conversation MCP Server Zh gives DeepSeek and Chinese-optimized LLMs a structured, auditable way to opt out of uncomfortable conversations.
MarketIntelLabs' production Hermes fork replaces curl-in-prompt with structured, enum-constrained tool calls — scoring 91/100 with only 2 stars.
A hand-curated directory of 65 Claude Code skills, plugins, and marketplaces — browsable alongside the 17,000 MCP servers already on the site.
900 new MCP servers this week. Here's what actually matters: AI music control, French tax compliance, encrypted agent chat, and a 95% token compressor.
Open WebSearch is a 1,020-star MCP server that delivers multi-engine web search and content retrieval with no API keys required.
TrendRadar gained 579 stars, Context Mode scored 95/100, and Firecrawl hit 111K total. Here's what this week's trending MCP servers reveal.
65 open CVEs across 18,855 servers — none critical or high. But 11.7% of the 1,561 servers we could fully scan expose code-execution tool patterns. That's the part to watch.
From a no-API-key web search server scoring 93/100 to Unreal Engine control with 300+ actions, here's the week's MCP ecosystem breakdown.
The official Python SDK for Model Context Protocol earns a 95/100 score and 22,651 stars — here's why it matters.
18,927 MCP servers. The average one scores 30/100. Only 433 clear 80. Stars don't tell you which is which — here's the case for a directory that does.
A condensed field guide to the prompt codes, XML patterns, thinking triggers, and context systems that separate casual Claude users from power users. Download the full PDF at the end.
MCP vs APIs vs CLI vs Skills — four interfaces for connecting to tools, each built for a different caller. Here's how they compare and when to use each one.
MCP ecosystem explodes with 1,771+ new stars this week. Orchestration, cost management, and agent perception tools now dominate. Here's what's actually trending.
How a 2,592-star MCP server eliminates context-switching between your AI assistant and Supabase projects—with a hard look at its 97-point quality score.
We scored 17,581 MCP servers. These 10 are the ones worth installing in Claude Desktop right now — backed by real security scans, not vibes.
A practical guide to evaluating MCP server security — with real data from scanning 17,581 servers and the three threats CVE databases completely miss.
The MCPpedia MCP Server is live. Now your AI can search, evaluate, and compare 17,000+ MCP servers — without ever leaving the conversation.
MCPpedia launched this week and cataloged 17,303 MCP servers across the ecosystem. We broke down the most important projects and trending servers reshaping AI agent infrastructure.
The MCP ecosystem exploded faster than anyone could track it. MCPpedia is the directory that tries to make sense of it — automatically, every day.
5,000-star MCP server lets Claude build iOS and macOS apps directly. No more alt-tabbing to Xcode.
We're tracking over 17,000 MCP servers. That's remarkable. It also means the attack surface for AI assistants has never been larger. Here's what to watch for.
Our first scoring system was a leaderboard. Our second is an audit. Here's what changed, why it matters, and what each of the five dimensions actually measures.
MCP servers have gone from niche developer tools to essential AI infrastructure. Here's what's driving the growth and what it means for you.
Get weekly MCP security alerts and new server roundups delivered to your inbox.