As a security professional whose employer has given Claude and various other AI tooling to everyone at the company, I kept finding myself as the bottleneck because my team had to review sometimes 4-5 repositories of MCP servers a day just to give a verdict whether it's safe to use in an enterprise environment.

So to make my life easier, I built an easy to read index that pulls all the MCP servers from the Official MCP Registry (https://registry.modelcontextprotocol.io/) periodically and scores them automatically based on several criteria like runtime guardrails, SAST scans, transport model etc.

I also recently made it available via an API so that others can integrate it into their workflow.

Feedback is always welcome!!!

PS: Index came first, it's completely free (you just have to request the API access, no payment required) and it works great (12k MCP servers scanned&scored and still counting!) for my use case so I started thinking whether I can govern the AI adoption a bit more in a friendly way without being the bottleneck. That's when the Canopii platform came to be. This is not meant as an ad for that.