Check your MCP stack
Paste the MCP config from your AI client. For every server in it that the index lists, you'll see what its manifest declares it can do — send, delete, move money — and its exposure score. Free, no sign-up.
Your config never leaves this page.
It is read in your browser and matched against a copy of the index that shipped with the page. This page cannot upload it:
its security policy blocks every network request, and it has no form. Your API keys stay on your machine, and they are never
shown in the result.
Open a config file
Matched against the listed servers.
Where your client keeps its config
- Claude Desktop
- ~/Library/Application Support/Claude/claude_desktop_config.json · %APPDATA%\Claude\claude_desktop_config.json
- Claude Code
- .mcp.json in your project · ~/.claude.json
- Cursor
- ~/.cursor/mcp.json · .cursor/mcp.json in your project
- VS Code
- .vscode/mcp.json · the "mcp" block of settings.json
- Windsurf
- ~/.codeium/windsurf/mcp_config.json
- Zed
- ~/.config/zed/settings.json
- Codex
- ~/.codex/config.toml
A score describes what a server's manifest declares, not how the product behaves — see the methodology. A server that is not listed has not been checked, which is not the same as low exposure. Maintain one that is missing? Submit it. Need a document to hand to a reviewer? Get the stack report.