A Gardu report on the top public MCP servers and skills: who ships them, how big they are, and what a static scan finds. Open data, reproducible.
The Model Context Protocol gives an AI agent hands: file system, browser, shell, databases, cloud APIs.
This Gardu report (Gardu is the scan engine behind Hexbane) catalogs the ecosystem, scans the top of the distribution and states what the scan actually finds.
About 359,500 public GitHub repos match mcp in their name; 45 top servers and 7 top skill collections are tracked with live star, fork and language data.
The 7 most-starred cloneable servers plus the Anthropic skills repo (2,952 files) run through the Gardu static scanner.
Zero-width, bidi and private-use characters, hidden tag text and base64 payloads, decoded before judging.
Instruction-override phrases such as "ignore all previous instructions".
Private keys and token formats, unpinned npx, remote transports, credential paths and secret-shaped tool parameters.
The scan results, metadata and the scripts that produced them are all in the repository.
32 files in the repo · last updated 10 Nov 2026.
Browse the codePages: add enablement=always so the site self-enables on first deploy
Gardu: State of MCP Servers - security scan of top public MCP servers + skills
Report, Open data. You can try it in the browser with nothing to install.
Not yet: it's marked “live” and still changing. The README always has the current state.
The source is public on GitHub under the MIT licence.
Juwen Lie, an R&D mechanical engineer in Batam, Indonesia, as an independent personal project.
What a scan finds in MCP servers.