Observed
Public endpoint behavior, metadata, package/source hints, and scan age.
The registry gives a point-in-time view of public MCP server posture. It is a starting point, not an assurance label.
Public endpoint behavior, metadata, package/source hints, and scan age.
Private controls, unpublished code, customer deployments, and secrets.
Use high-risk results as a stop sign and low-risk results as a prompt for targeted review.