74
grade C
2 days ago
glama
mcpwatch
MCP server that audits other MCP servers. Run MCPWatch security scans from inside Claude Code or any MCP-compatible agent with 10 OWASP MCP Top 10 aligned checks and A-F letter grades.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
MCPWATCH_API// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/lazymac2x-mcpwatch-phj7zy)commit: 7f927162191403d61430265c89f468164cfda83f
code hash: a377986fd593d7e2a5aca40e39bc6f42aaf388d49089e93008ff77b6180cde94
verified: 4/18/2026, 6:13:35 PM