How scoring works

Each server gets a 0–100 score from public signals, recomputed nightly. It's a triage signal, not an audit. Always review code and permissions before connecting an agent to real data.

Maintenance (40)

Up to 30 points for recent commits, decaying to 0 at ~6 months without a push. Up to 10 for a manageable open-issue load. Archived repos score 0.

Security hygiene (35)

OSI licence (12), a SECURITY.md disclosure policy (10), a published versioned package or hosted endpoint (6), and repo age over 60 days (7). Brand-new repos get flagged.

Adoption (25)

Log-scaled GitHub stars (15) and npm weekly downloads (10).

Inclusion

We list only servers in the official MCP Registry that link a public GitHub repository. Featured placement never changes a score.