Source coverage
Check what repository or source material was actually available to the scanner. Limited or missing implementation evidence reduces what a result can represent.
MCP security evidence
MCP security: review the evidence before connecting a server
ToolRepute combines reviewed static-analysis findings, source coverage, publication state, and methodology so you can inspect what was observed without turning a scan into a safety guarantee.
Live ToolRepute evidence coverage
These counts come from the current ToolRepute corpus. They describe indexed tools, published reviewed results, and published findings; they are not counts of safe or approved tools.
- Indexed tools
- 45,829
- Published reviewed results
- 44
- Published findings
- 202
What MCP security evidence means on ToolRepute
Static-analysis findings
Findings are detected security-relevant signals with severity, context, and limitations. They are not proof of malicious intent, exploitability, or compromise.
Review and publication
ToolRepute separates scanning from review and publication. A published result means the evidence passed the publication workflow, not that the tool received a safety endorsement.
How to evaluate an MCP server
- 1. Find the integration. Start in the MCP database and open the specific server or tool you are considering.
- 2. Check coverage and findings. Confirm which source was analyzed, whether coverage is sufficient, and what findings were published.
- 3. Read the limitations. Static analysis does not observe hosted runtime behavior, future source changes, or infrastructure outside the inspected source.
Recent published evidence
Recent published results from the ToolRepute corpus. Open an item to inspect its source coverage, findings, and review context.
Understand the limits before deciding
ToolRepute evidence is bounded by the source that was available and the scanner rules used at the time. Use the methodology to understand what each result covers, what it does not cover, and how review and publication are kept separate from security guarantees.