Skip to content

MCP Rating

by mcprating.io · remote · no sign-in to list tools · v0.2.0 · published by io.mcprating

Search MCP servers, with our own start-test results, required keys, tools and token cost.

Changes · 1

6 tools: 1 change things and 5 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http search https://mcprating.io/mcp/

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • The server marks "get_install_config" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_install_config" says "get": a word for reading.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...it started when we ran it ourselves (no credentials, on a schedule), how it is maintained (..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 1Claude Code: ask
  • get_install_configGenerate a ready-to-paste configuration snippet for connecting a discovered MCP server to Claude Desktop or Cursor.1 finding

    Why it is in this group

    • The name "get_install_config" says "get": a word for reading.
    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_install_config" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_install_config" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Generate a ready-to-paste configuration snippet for connecting a discovered MCP server to Claude Desktop or Cursor. MCP servers cannot auto-install — users must manually add configuration. This tool reduces that friction.

    Annotations the server declares

    • title: Get install config
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Claude Code: allow
  • discover_serverFetch the live .well-known/mcp discovery manifest from an indexed MCP server.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch the live .well-known/mcp discovery manifest from an indexed MCP server. Returns transport endpoints, capabilities, and auth requirements needed to connect. Only works for servers that support MCP discovery.

    Annotations the server declares

    • title: Fetch a server's discovery manifest
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_index_statsGet overall statistics about the MCP Rating index: total servers, top categories, and last crawl time.No findings

    Why it is in this group

    • The name "get_index_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get overall statistics about the MCP Rating index: total servers, top categories, and last crawl time.

    Annotations the server declares

    • title: Get index statistics
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_serverGet what is known about one MCP server by slug: whether it started when we ran it ourselves (no credentials, on a schedule), how it is maintained (last release, last code push, ope…1 finding

    Why it is in this group

    • The name "get_server" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...it started when we ran it ourselves (no credentials, on a schedule), how it is maintained (..."

      What this check looks for
    Description, as the server wrote it
    Get what is known about one MCP server by slug: whether it started when we ran it ourselves (no credentials, on a schedule), how it is maintained (last release, last code push, open issues, archived or deprecated), how to run it (install command or hosted endpoint), the keys it declares, its tools with their parameters, and roughly how many tokens its tool definitions cost. Listings are informational — verify details before installing.

    Annotations the server declares

    • title: Get MCP server details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_categoriesList all available MCP server categories with the count of servers in each.No findings

    Why it is in this group

    • The name "list_categories" says "list": a word for reading.
    Description, as the server wrote it
    List all available MCP server categories with the count of servers in each.

    Annotations the server declares

    • title: List server categories
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_serversSearch the MCP Rating index of MCP servers.No findings

    Why it is in this group

    • The name "search_servers" says "search": a word for reading.
    Description, as the server wrote it
    Search the MCP Rating index of MCP servers. Returns matches for a query, optionally filtered by category and sorted by quality, stars, downloads, recency, or name, each marked with the outcome of our own start test when we have run one, and with its last release and last code push dates where we know them. Quality scores are algorithmic estimates.

    Annotations the server declares

    • title: Search MCP servers
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http search https://mcprating.io/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__search__search_servers",
      "mcp__search__get_server",
      "mcp__search__list_categories",
      "mcp__search__get_index_stats",
      "mcp__search__discover_server"
    ],
    "ask": [
      "mcp__search__get_install_config"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as search. Review it before you use it.