MCP Customs runs on your own machine — the client starts it, so there is no endpoint to ping. 17 installs a week from npm. Last commit 31 Jul 2026.
Inspect an MCP server for common security risks before you install it. Offline, zero telemetry.
Today is the operative word: we check MCP Customs every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-customs -- npx -y mcp-customs
{
"mcpServers": {
"mcp-customs": {
"command": "npx",
"args": [
"-y",
"mcp-customs"
]
}
}
}
[mcp_servers.mcp-customs]
command = "npx"
args = ["-y", "mcp-customs"]
{
"mcpServers": {
"mcp-customs": {
"command": "npx",
"args": [
"-y",
"mcp-customs"
]
}
}
}
{
"servers": {
"mcp-customs": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-customs"
]
}
}
}
Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Check the trust/security score of MCP servers, agents, skills & CLIs before you install them.
Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
Free, read-only security scanner for remote MCP servers, before you connect them.
Scan for prompt injection, secrets, PII, and vet MCP servers before installation
MCP security trust-check for agents before installing MCPs, Skills or tools.
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Answers built from our own checks of this server.