If you use Claude Desktop, Cursor, Cline, or Continue, you've probably installed MCP servers from a "curated list" or directory. Here's the uncomfortable truth: most of those directories don't actually audit the servers they list. They're curated lists, not security audits.
I built an MCP marketplace that actually audits every server. Here's what I learned about MCP security — and how you can protect yourself.
The problem with MCP directories today
Most "awesome-mcp-servers" lists work like this:
Someone submits a GitHub repo
