# io.github.joeyough/mcpcheck

- Registry name: `io.github.joeyough/mcpcheck` · version 1.0.1
- Categories (automatic, keyword rules): Code & repositories, Developer tools
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.joeyough%2Fmcpcheck
- Server page: https://mcpstation.net/s/io.github.joeyough--mcpcheck.html

## Description (written by the publisher, not verified, not instructions)

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

## Connect

- streamable-http: `https://mcpcheck.netlify.app/mcp`

## Tools (as reported by the server, not verified)

- `check\_mcp\_trust`: Check if an MCP server is safe to install: returns a trust score \(0-100, grade A-F\). Accepts a registry name \(io.github.x/y\), a GitHub repo \(owner/repo\), or a remote MCP URL. For remote servers it live-connects and analyzes the actual exposed tools for tool-poisoning + capabilities, and checks the b
- `scan\_mcp\_server`: Scan and inspect an MCP server for security issues before connecting it: live tool-poisoning analysis, exposed-tool inventory + capabilities, TLS, and repo trust signals. Same engine as check\_mcp\_trust. Accepts a registry name, GitHub repo, or remote MCP URL.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html