Is io.github.brandonclark1996-design/toolrank safe to use?

io.github.brandonclark1996-design/toolrank has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.

How do I install io.github.brandonclark1996-design/toolrank?

io.github.brandonclark1996-design/toolrank supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.brandonclark1996-design/toolrank?

io.github.brandonclark1996-design/toolrank is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.brandonclark1996-design/toolrank actively maintained?

io.github.brandonclark1996-design/toolrank is recently maintained - last commit was 62 days ago.

io.github.brandonclark1996-design/toolrank

Rank MCP servers/APIs for a job. Lexical ranking, 36 curated tools, no Stripe.

GitHub

No known CVEs

No license

Maintained

Last commit 62d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 2d ago

Edit this pageView history

io.github.brandonclark1996-design/toolrank is an MCP server that rank MCP servers/APIs for a job. Lexical ranking, 36 curated tools, no Stripe. Its tool list has not been published yet over http, requires no API key, and scores 35/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "toolrank": {
      "cwd": "/workspace/toolrank",
      "args": [
        "run",
        "mcp"
      ],
      "command": "npm"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-brandonclark1996-design-toolrank)](https://mcppedia.org/s/io-github-brandonclark1996-design-toolrank)

Read me

What io.github.brandonclark1996-design/toolrank does

Rank MCP servers/APIs for a job. Lexical ranking, 36 curated tools, no Stripe.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

35/100across 5 weighted dimensions

How we score →

0255075100

−65

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.brandonclark1996-design/toolrank safe to use?: io.github.brandonclark1996-design/toolrank has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install io.github.brandonclark1996-design/toolrank?: io.github.brandonclark1996-design/toolrank supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.brandonclark1996-design/toolrank?: io.github.brandonclark1996-design/toolrank is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.brandonclark1996-design/toolrank actively maintained?: io.github.brandonclark1996-design/toolrank is recently maintained - last commit was 62 days ago.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

260 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

228 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.brandonclark1996-design/toolrank and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "toolrank": {
      "cwd": "/workspace/toolrank",
      "args": [
        "run",
        "mcp"
      ],
      "command": "npm"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-brandonclark1996-design-toolrank)](https://mcppedia.org/s/io-github-brandonclark1996-design-toolrank)

Read me

What io.github.brandonclark1996-design/toolrank does

Rank MCP servers/APIs for a job. Lexical ranking, 36 curated tools, no Stripe.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

ToolRank (private MVP → public-ready deploy)

Ranked shortlist of MCP servers / APIs for agent jobs — health, price_band, and install snippet.

Live: https://toolrank.onrender.com — OpenAPI at /openapi.json, Streamable HTTP MCP at /mcp.

Honesty: Ranking is lexical (token overlap), not learned or sponsored. Catalog is 36 curated tools. health is often unknown. Stripe is not wired. Custom domain is not purchased.

Stack

Node 20, TypeScript
Hono HTTP API
Zod validation
JSON catalog (data/catalog.json, 36 curated public tools)
MCP stdio (npm run mcp) and Streamable HTTP (POST /mcp) via @modelcontextprotocol/sdk
API-key auth + process-local soft quotas (src/auth.ts) on /v1/* and /mcp

Quick start (local)

cd /workspace/toolrank
cp .env.example .env
# Edit .env — set TOOLRANK_API_KEYS if you want keyed access locally
export TOOLRANK_API_KEYS='trk_live_test:builder'
npm install
npm test
npm run build
npm start              # listens on 0.0.0.0:$PORT (default 8787)
# or: npm run dev

Local curl with a test key

export TOOLRANK_API_KEYS='trk_live_test:builder'
npm start

curl -s http://127.0.0.1:8787/health | jq .

curl -s http://127.0.0.1:8787/v1/search \
  -H 'content-type: application/json' \
  -H 'Authorization: Bearer trk_live_test' \
  -d '{"job":"scrape website to markdown for RAG","constraints":{"budget":"any"},"limit":5}' | jq .

# Or X-API-Key:
curl -s http://127.0.0.1:8787/v1/search \
  -H 'content-type: application/json' \
  -H 'X-API-Key: trk_live_test' \
  -d '{"job":"web search for research","limit":3}' | jq .

Anonymous (no key) works until the free IP quota is hit (20 / rolling 24h).

Auth + limits

Caller	How	Soft limit (process-local, rolling 24h)
Anonymous	No key	20 req / IP to `/v1/*` and `/mcp`
`free` key	`Authorization: Bearer <key>` or `X-API-Key: <key>`	100 / key
`builder` key	same headers	2000 / key

Env: TOOLRANK_API_KEYS = comma-separated keys, optional key:plan (free | builder). Example: trk_live_abc:builder,trk_live_xyz:free. Bare key → free.
/health and /openapi.json are always open (no auth / no quota).
Invalid key → 401 { error, schema_version, as_of }
Over quota → 429 + Retry-After (seconds hint)
Authed POST /v1/search responses include plan (free | builder)
Quotas are in-memory / process-local — fine for single-instance MVP; they reset on restart and do not sync across replicas.

Setting keys on the host (Brandon)

Do not commit real keys. Set TOOLRANK_API_KEYS in the host environment:

Render: Dashboard → your Web Service → Environment → add TOOLRANK_API_KEYS = trk_live_….…:builder,… (use sync: false / secret). Redeploy.
Railway: Service → Variables → TOOLRANK_API_KEYS.
Docker / VPS: -e TOOLRANK_API_KEYS='…' or systemd/env file outside git.
Local: export TOOLRANK_API_KEYS='trk_live_test:builder' before npm start.

Also set HOST=0.0.0.0 (default in code) and let the platform inject PORT.

HTTP API

Base: https://toolrank.onrender.com (or http://127.0.0.1:8787 locally).

Method	Path	Description
GET	`/health`	Liveness + catalog meta (open)
POST	`/v1/search`	Rank tools for a job (auth/quota)
GET	`/v1/tools/:id`	Tool detail (auth/quota)
GET	`/v1/fresh?since=`	Updated since ISO timestamp (auth/quota)
GET	`/openapi.json`	OpenAPI 3.1 (open)
ALL	`/mcp`	Streamable HTTP MCP (auth/quota; same tools as stdio)

Searc

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

35/100across 5 weighted dimensions

How we score →

0255075100

−65

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.brandonclark1996-design/toolrank safe to use?: io.github.brandonclark1996-design/toolrank has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install io.github.brandonclark1996-design/toolrank?: io.github.brandonclark1996-design/toolrank supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.brandonclark1996-design/toolrank?: io.github.brandonclark1996-design/toolrank is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.brandonclark1996-design/toolrank actively maintained?: io.github.brandonclark1996-design/toolrank is recently maintained - last commit was 62 days ago.