Evidence-backed MCP server risk signal catalog and local CLI.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"xone-mcp-risk-index","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# mcp-risk-index Languages: English | [中文](./README.zh-CN.md) An open risk index for common MCP servers, permissions, commands, and maintenance signals. ## Status `v0.3.1` - evidence-backed catalog rendering with reviewer questions, strict review checks, and refreshed public sample metadata. ## Purpose Convert `mcp-audit` rule experience into a reusable public data asset without unsupported claims. ## First Production Surface Versioned data catalog with evidence-backed entries and a deterministic local CLI. From PyPI: ```bash python3 -m pip install xone-mcp-risk-index mcp-risk-index init --output mcp-risk-index.catalog.yml mcp-risk-index validate --catalog mcp-risk-index.catalog.yml --strict mcp-risk-index render --catalog mcp-risk-index.catalog.yml --format markdown --output mcp-risk-index.md mcp-risk-index render --catalog mcp-risk-index.catalog.yml --format json --output mcp-risk-index.json ``` From Homebrew: ```bash brew install x-one-ai/tap/mcp-risk-index mcp-risk-index --version ``` From a source checkout, you can also validate the bundled catalog: ```bash mcp-risk-index validate --catalog data/catalog.yml --strict mcp-risk-index render --catalog data/catalog.yml --format markdown --output mcp-risk-index.md mcp-risk-index render --catalog data/catalog.yml --format json --output mcp-risk-index.json ``` For local development: ```bash python3 -m pip install -e '.[dev]' python3 -m pytest tests -q ``` ## Catalog Contract The bundled catalog uses `mcp-risk-index.catalog.v1`. Each entry records identity, package, launch command, permissions, maintenance facts, review-level risk signals, evidence, and limitations. Rendered Markdown and JSON also include reviewer questions derived from the evidence-backed signals. Review levels are prompts for human inspection: - `info`: useful context - `review`: inspect before adoption - `high-review`: require explicit owner approval They are not safety scores. Strict validation requires production review gover…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.