From 3399c1588eca64e77ebd4d9bf8e0a4b421aa0811 Mon Sep 17 00:00:00 2001 From: Thomas Connally Date: Fri, 12 Jun 2026 19:09:51 -0500 Subject: [PATCH 1/2] =?UTF-8?q?fix:=20landing=20page=20numbers=20match=20r?= =?UTF-8?q?eality=20=E2=80=94=20105=20analyzers,=20594=20tests?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The landing page undersold the test suite (365 claimed vs 594 actual passing) and slightly oversold analyzer count (120 claimed vs 105 actual). Updated to match the real codebase. --- index.html | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/index.html b/index.html index ae507f3..3cc4904 100644 --- a/index.html +++ b/index.html @@ -514,19 +514,19 @@
-
MCP Server Security — 365 tests passing
-

120 Analyzers. One Command.

+
MCP Server Security — 594 tests passing
+

105 Analyzers. One Command.

MCTS is a comprehensive security scanner for MCP servers. It detects tool poisoning, prompt injection, credential leaks, and behavioral regressions — then blocks vulnerable PRs automatically.

Analyzers
-
120rules
+
105rules
Static analysis, fuzzing, behavioral evals across 12 categories of MCP security vulnerabilities.
Test Suite
-
365passing
+
594passing
Every analyzer verified by its own regression test. Self-verifying — tests its own detections.
From 268e1fc96e50f007e3534581b0b69cedf2149be0 Mon Sep 17 00:00:00 2001 From: Thomas Connally Date: Fri, 12 Jun 2026 20:05:09 -0500 Subject: [PATCH 2/2] fix: replace aspirational registry scan data with real scan results MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Ran MCTS against 7 popular MCP servers. Real results: - FastMCP: 191 findings, 71 HIGH+, 20 CRITICAL (worst) - MCP Official Servers: 89 findings, 24 HIGH+, 4 CRITICAL - Exa MCP: 24 findings, 7 HIGH+, 2 CRITICAL - Playwright MCP, Figma MCP, Anthropic Tools, LangChain MCP: clean - 3/7 (43%) have HIGH+ findings Previous data (81%, 16 servers) was aspirational — replaced with verified results from today's scans. --- index.html | 27 +++++++++------------------ 1 file changed, 9 insertions(+), 18 deletions(-) diff --git a/index.html b/index.html index 3cc4904..a03f55b 100644 --- a/index.html +++ b/index.html @@ -531,8 +531,8 @@

105 Analyzers. One Command.

Registry Scan
-
81%
-
13 of 16 top MCP servers have ≥1 HIGH finding. Scanned: Playwright MCP, AWS MCP, n8n, FastMCP, Cline, and 11 more. Real data, Jun 12 2026.
+
43%
+
3 of 7 top MCP servers have ≥1 HIGH finding. Scanned: MCP Official Servers, FastMCP, Exa MCP, Playwright MCP, Anthropic Tools, and more. Real data, Jun 12 2026.
Block Mode
@@ -798,28 +798,19 @@

Registry Scan Results

- Playwright MCP960 - AWS MCP1,353450108 - n8n463840 - FastMCP31010220 - Cline437160 - Continue490110 - Stagehand132132 - MCP Official Servers121294 - Pydantic AI207102 - UI-TARS Desktop378173 - Exa MCP29102 - Serena5130 - Gen AI Toolbox3540 - Figma Context MCP3100 + FastMCP1917120 + MCP Official Servers89244 + Exa MCP2472 + Playwright MCP1500 + Figma Context MCP3000 Anthropic Tools100 - LangChain MCP2200 + LangChain MCP100

- 16 servers scanned Jun 12, 2026. 13/16 (81%) have ≥1 HIGH finding. 6/16 (38%) have ≥1 CRITICAL. + 7 servers scanned Jun 12, 2026. 3/7 (43%) have ≥1 HIGH finding. 3/7 (43%) have ≥1 CRITICAL. Scan command: mcts scan <repo>