Security & Testing
mcpcheckup.xyz
Scans and rates remote MCP servers for security, protocol compliance, and provides shareable security scorecards.
ENDPOINT 1
https://mcpcheckup.xyz/api/mcp
MCP server metadata
- Name
- mcpcheckup
- Version
- 0.1.0
Known tools 2
scan_mcp_serverRun a full MCPCheckup scan against a remote MCP server: handshake, protocol version, tool/resource/prompt inventory, security heuristics, network/TLS posture, and license info.
Inferred read-onlycreate_scorecardScan a remote MCP server and return a shareable scorecard: security score (0-100), letter grade, a public scorecard page URL, and an Open Graph image URL for embedding or social sharing.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.mcpcheckup]
url = "https://mcpcheckup.xyz/api/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"mcpcheckup": {
"type": "http",
"url": "https://mcpcheckup.xyz/api/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: mcpcheckup
Remote MCP URL: https://mcpcheckup.xyz/api/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"mcpcheckup": {
"url": "https://mcpcheckup.xyz/api/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"mcpcheckup": {
"type": "http",
"url": "https://mcpcheckup.xyz/api/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "mcpcheckup",
"transport": "streamable-http",
"url": "https://mcpcheckup.xyz/api/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for mcpcheckup.xyz was fetched 2026-08-03T23:07:04.064Z and is being refreshed.
mcpcheckup.xyz is assessed as Neutral: No suspicious signals found, but no strong positive signal either
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.