Smithery is the largest public MCP registry right now. Over 5,400 servers listed. We took the top 500...
Smithery is the largest public MCP registry right now. Over 5,400 servers listed. We took the top 500 by install rank, ran them through Bawbel Scanner v1.2.2, and logged every finding.
No theory. No simulated payloads. Real server-card content, real tool descriptions, real detection results.
pip install "bawbel-scanner[all]"
bawbel ssc https://your-mcp-server.example.com
Enter fullscreen mode
Open-source supply-chain trust gate for MCP servers, validated on 200 packages. 3 BLOCK findings including 1 hardcoded LLM API…
MCP servers expose tools to LLMs, but most configs grant tools broader permissions than they need,...
The MCP ecosystem grew faster than anyone could audit it. Now there's a tool trying to catch up — and...
I spent an afternoon digging through the MCP ecosystem numbers. Here is what I found. The...
The MCP ecosystem has a trust problem — and scanning source code won't fix it The Model...
I've spent a lot of time thinking about where MCP servers should live. I work with remote MCP servers...
