No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by xfey · MCP Server · ★ 514
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is MCP-Zero safe to install? View the security audit →
MCP-Zero: Active Tool Discovery for Autonomous LLM Agents -- https://arxiv.org/abs/2506.01056 Thanks for your attention for MCP-Zero! 🤗 We have now open-sourced the code involved in the paper. We will continue to update our work, explore its application in the industry, and continue to expand this project. Using MCP-Zero to proactively construct toolchains for "Making a great meal" Method: MCP-Zero We have now released our code for the paper. The code in the paper implem
| Stars | 514 |
| Forks | 57 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 64.9068810788052/100 |
| Open Issues | 18 |
| Last Updated | 2025-07-02 |
| Created | 2025-06-01 |
| Platforms | mcp, python |
| Est. Tokens | ~22k |
Explore other popular mcp server tools:
MCP-Zero is MCP-Zero: Active Tool Discovery for Autonomous LLM Agents. It is categorized as a MCP Server with 514 GitHub stars.
MCP-Zero is primarily written in Python.
You can find installation instructions and usage details in the MCP-Zero GitHub repository at github.com/xfey/MCP-Zero. The project has 514 stars and 57 forks, indicating an active community.
MCP-Zero is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: