New MCP directory RepoAI scores servers on trust, auth, and dangerous tools
Low_Location1261 · reddit · 2026-07-21
- The author built repoai.io, a directory and security-scoring tool for MCP servers, after worrying about giving random MCP repos read/write access to local files or command execution.
- The site assigns a transparent Trust Score (0–100) using 15 public checks, including maintainer identity, repo activity, stars, license, dependency footprint, archive status, read-only mode, OAuth support, and the share of dangerous execute/delete/write tools.
- The author stresses that this is not a penetration test or CVE scanner; it is a public-signal-based review system with some manual and AI-assisted checks.
- They’re asking developers whether the weights make sense and what other signals should be added.
More from coding & agent
- Spring AI 2.1.0-RC1 adds tool-call confirmation, pausing agent loops before real-data access — therealdanvega · 2026-10-26
- 250 Builders Hack With Codex at Berlin Community Hackathon Ahead of OpenAI DevDay — paw_lean · 2026-10-26
- Building AI bots on raw APIs? Devs say models are 'dumb without the harness' — madeofAjala · 2026-10-26
- HarnessMM cuts agent tokens per task by up to 88% while raising success rates — omarsar0 · 2026-10-26
- Microsoft demos intent-classifying agents built with Copilot App and Foundry, deployable across Teams and Outlook — marlene_zw · 2026-10-26
- Looking for a wearable mic with best battery life that feeds recordings to personal agents via MCP — altryne · 2026-10-26