🪨 MCP Risk Index

Every MCP server in the official registry that can start without credentials, scanned by Kairoseki: which tools look like legs of the lethal trifecta, which tool descriptions read like prompt injections, and which tools changed silently since the last scan.

A flag means "worth a look", not "malicious". Labels come from heuristics on tool names and descriptions and can be wrong; a server that covers all three legs on its own is not unsafe by itself, it just deserves Kairoseki in front of it. Maintainers: wrong label? Open an issue.