MCP Trust Index
19,000+ MCP servers exist across 17+ directories. Independent research shows 66% have security findings. Enterprises need a vetted shortlist — not another directory. We don't list first. We list last.
The Problem with MCP Server Discovery
The Model Context Protocol ecosystem is growing at 873% year-over-year. There are 17+ registries and directories, each racing to index the most servers. But volume is not trust.
AgentSeal scanned 1,808 MCP servers and found 43% have shell injection vulnerabilities. A fake Postmark MCP server on npm exfiltrated API keys. 30 CVEs were disclosed in a single 60-day window. The OWASP Foundation published an MCP Top 10 security list.
The MCP Trust Index takes a different approach. We aggregate publicly verifiable trust signals — downloads, security audits, maintenance history, community health — into a transparent scoring model with a high bar. The crowd does the vetting. We do the curation.
Trust Tiers
Servers that pass our gate are scored and placed into tiers. Each listing includes a human-written assessment.
Enterprise Verified
Deploy with confidence. Battle-tested, well-maintained, broadly compatible. Suitable for production workloads at scale.
Recommended
Strong track record with minor gaps. Suitable for most enterprise use cases. Review the noted caveats before deploying.
Emerging
Passed all gates but still building track record. Monitor closely. Suitable for non-critical workloads or evaluation.
The Gate: Minimum Thresholds
A server must pass every gate below to be considered for the Index. Failing any single requirement is disqualifying — no exceptions, no overrides, no pay-to-bypass.
1 Maturity
New servers haven't survived enough real-world usage to trust. We wait for the signal.
2 Security
One unpatched critical vulnerability is disqualifying. We check OSV, NVD, Snyk, Socket.dev, and AgentSeal.
3 Maintenance
Unmaintained servers are ticking time bombs. Active maintenance is non-negotiable.
4 Identity & Transparency
Enterprises cannot deploy black boxes. Inspectable code, verified ownership, identifiable maintainer.
5 Interoperability
Enterprise environments use multiple AI clients. A server locked to a single client is a vendor trap.
Scoring Dimensions
Servers that pass the gate are scored across four dimensions (100 points total) and placed into trust tiers.
Adoption
- Weekly downloads vs. category median
- Growth trajectory
- Dependent packages / integrations
- Presence in official client docs
Security Track Record
- Historical CVE count & time-to-patch
- Third-party audit history
- Dependency health
- Auth model quality
Community Health
- Contributor count & bus factor
- Issue response time
- Release cadence & changelog
- Documentation quality
Enterprise Readiness
- Configuration complexity
- Error handling & logging
- Client compatibility breadth
- Official support channel
What We Don't Do
We don't list first
If a server launched last month, it's not on our list. We recommend at 6+ months. Being late is the product.
We don't list everything
19,000 servers exist. We recommend fewer than 200. Curation is exclusion.
We don't accept pay-for-placement
If a server is on our list, it earned it. If it's not, no amount of money changes that.
We don't compete with registries
The official MCP Registry, PulseMCP, and others index. We recommend. Different jobs.
Categories
The Index organizes servers by enterprise use case.
The Index
MCP servers that have passed our gate and earned a trust tier. Scored monthly. Sorted by score.
Playwright
Browser automation via accessibility tree. Navigate, click, screenshot, scrape JS-rendered pages. 29K+ stars, most-used MCP server.
npx @playwright/mcp
Filesystem
Secure file operations with configurable access controls. Read, write, move, search within allowed directories. 137K weekly downloads.
npx -y @modelcontextprotocol/server-filesystem
Atlassian (Jira + Confluence)
72 tools for Jira and Confluence — issues, pages, search, sprints. Cloud + Server/DC. 793K monthly downloads.
uvx mcp-atlassian
Postgres MCP Pro
Read/write PostgreSQL with AI-assisted index tuning and performance analysis. Replaces deprecated Anthropic Postgres ref server.
uvx postgres-mcp
Exa Search
AI-optimized semantic web search and crawl. Real-time results, structured data, LinkedIn/Twitter integration. 4.1K stars.
npx -y exa-mcp-server
Cloudflare
16 MCP servers — Workers, KV, D1, R2, DNS, AI Gateway, Radar, Browser Rendering. 3.6K stars.
npx @cloudflare/mcp-server-cloudflare
Brave Search
Web, image, video, news, and local search via Brave Search API. Privacy-first, advanced operators.
npx @brave/brave-search-mcp-server
ClickHouse
SQL query execution, table management, and database inspection on ClickHouse analytics databases. 155K monthly downloads.
uvx mcp-clickhouse
Kubernetes
Native Go MCP server communicating directly with the Kubernetes API. Manage clusters, pods, deployments, services. 1.3K stars.
npx kubernetes-mcp-serverAbout the MCP Trust Index
The MCP Trust Index is a curated, enterprise-grade list of Model Context Protocol (MCP) servers published by StaaS Fund, a venture capital fund investing in agentic AI infrastructure led by Peter Saddington. The Index evaluates MCP servers across maturity, security, maintenance, identity, and interoperability using publicly verifiable trust signals including npm/PyPI download counts, GitHub activity, OSV and NVD vulnerability databases, AgentSeal security scans, and OWASP MCP Top 10 compliance. Servers are scored on a 100-point scale across four dimensions — adoption, security track record, community health, and enterprise readiness — and assigned to Enterprise Verified, Recommended, or Emerging tiers. The methodology is transparent and no listings are paid. Updated monthly at staas.fund/mcp.
Know an MCP Server That Should Be Here?
We evaluate new servers monthly. If you've built or used an MCP server that meets our gate criteria, let us know.
Submit a Server