MCP servers ranked by security posture
The servers people connect their AI agents to — scored on the security basics of the vendor domains behind them.
| Name | Grade | DMARC | SPF | security.txt | llms.txt | Endpoint auth |
|---|---|---|---|---|---|---|
| Cloudflare MCP server | A93 | Enforced | Yes | Yes | Yes | — |
| E2B MCP server | B86 | Enforced | Yes | Yes | Yes | — |
| Sentry MCP server | B86 | Enforced | Yes | Yes | Yes | — |
| Browserbase MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| Exa MCP server | B79 | Enforced | Yes | No | Yes | — |
| Firecrawl MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| GitHub MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| Linear MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| Stripe MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| Supabase MCP server | B79 | Enforced | Yes | Yes | Yes | — |
| Tavily MCP server | B79 | Enforced | Yes | No | Yes | — |
| Zapier MCP | B79 | Enforced | Yes | No | Yes | — |
| Slack MCP server | C71 | Enforced | Yes | Yes | Yes | — |
| Composio | C64 | Enforced | Yes | No | Yes | — |
| Glama (registry) | C64 | Enforced | Yes | No | Yes | — |
| PulseMCP (registry) | D57 | Enforced | Yes | No | No | — |
| Smithery (registry) | D57 | Enforced | Yes | No | No | — |
| Notion MCP server | D50 | Enforced | Yes | No | Yes | — |