MCP Trust Index

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Curated, trust-first index of vetted MCP servers — scored tiers, monthly re-verified. Read-only.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "MCP Trust Index": {
      "url": "https://staas.fund/mcp/server",
      "transport": "streamable-http"
    }
  }
}

Measured tools (5)

• search_servers

  Search the MCP Trust Index for vetted MCP servers. Filter by free-text query (matched against name, publisher, description, and category), category, and/or trust tier. Returns compact records sorted by score. Call with no arguments to list the entire index.

  Parameters:

  • tier — string — enterprise-verified | recommended | emerging
  • query — string — Free-text filter, e.g. "postgres", "browser", "search"
  • category — string — One of: Database, Developer Tools, File Systems, Search, Productivity, CRM/Business, Cloud, Monitoring, AI/ML

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_server

  Full Trust Index record for a single listed server: score, tier, publisher, description with caveats, category, install command, and links. Name is matched case-insensitively.

  Parameters:

  • name (required) — string — Server name, e.g. "Playwright" or "context7"

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_rubric

  The full MCP Trust Index methodology as markdown: the 5 gates every server must pass, the 4 scoring dimensions, trust tiers, and editorial policies.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_watchlist

  Servers the Index deliberately does not score: closed-source hosted vendor endpoints and platform-native MCP capabilities (no inspectable code to gate), plus open servers being watched that have not yet passed the gates.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_changelog

  Public log of every addition, removal, and re-score on the Trust Index, with reasoning.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.