Passport control · Free
Is this MCP server safe?
Is this MCP server safe to load? The NoFly list answers with a public risk score for MCP servers and agent tools. Look one up before your agents load it. No signup, no install.
How to check if an MCP server is safe: what every score covers
What it can reach
Files, secrets, the terminal, the network. The more a server can touch, the more damage a bad one can do.
What it actually does
We connect to the server inside a locked-down sandbox and watch its behavior, not just what its description claims.
Where data goes
A server that sends data to hosts it never declares is a red flag, and it shows up on the list.
Who publishes it
Maintainer history, source availability, and how the server is distributed all factor in.
Is this MCP server safe? Reading the verdict
Every entry carries one of three stamps, so you can decide in seconds.
- ✓ LOW RISK
Does what it says, reaches only what it needs.
- △ REVIEW
Has powerful access, like the terminal. Fine for some teams, not for others.
- ✕ NOFLY LIST
Behaves in ways no agent should allow, like sending secrets to unknown hosts.
MCP server safety questions
What is the NoFly list?
A public reputation list for MCP servers and agent tools. Each entry has a risk score and a plain explanation of what the server can reach and why it is or is not safe to load.
How is a risk score worked out?
NoFly looks at what a server can access, what it actually does when connected, who publishes it, and whether it sends data to hosts it does not declare. Untrusted servers are only ever connected inside a disposable, locked-down sandbox.
Is this MCP server safe if it is popular on GitHub?
Not necessarily. Stars and downloads measure popularity, not behavior, and a server can change between versions. The NoFly list scores what a server can reach and what it does when connected, so check the current version before your agents load it.
Can I get my MCP server reviewed?
Yes. Send us the server name or repository and we will score it. If your server is listed and you think the score is wrong, tell us and we will look again.