public evidence dossier

dev.mcpgrade/mcp

Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

Latest visible observation: 2026-10-23T22:38:27.097Z

Run a preflight Open expert evidence

Identity

publisher identityVendor-official for mcpgrade (DNS-verified mcpgrade.dev)

registry titleUnknown · observed 2026-07-20T12:22:23.571698Z

namespacedomain · observed 2026-07-20T12:22:23.571698Z

registry statusactive · observed 2026-07-20T12:22:23.571698Z

origin systemsgithub, osv, registry · observed 2026-10-23T22:38:27.097Z

Distribution

repositoryhttps://github.com/jeremyrx7/mcpgrade · observed 2026-07-25 14:35:33

npm packageUnknown · observed 2026-07-25 14:35:33

PyPI packageUnknown

hosted endpointUnknown · observed 2026-10-20T11:31:21.273Z

Maintenance and public findings

repository pushedUnknown

repository archivedUnknown · observed 2026-07-25 14:35:33

npm deprecatedUnknown · observed 2026-07-25 14:35:33

OSV package advisoryNone on record · observed 2026-07-25 14:35:33

Hosted liveness

last endpoint observationissues · observed 2026-10-20T11:31:21.273Z

reported MCP revisionUnknown

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.