io.scorecard/mcp MCP server
Checked 2026-09-07. Alive: yes. Handshake: gated.
Category: ai-ml. API and field schema.
Facts
| id | scorecard-ai--scorecard-node |
| name | io.scorecard/mcp |
| registry_name | io.scorecard/mcp |
| repo_url | https://github.com/scorecard-ai/scorecard-node |
| endpoint_url | https://mcp.scorecard.io/mcp |
| transport | mixed |
| alive | yes |
| liveness_reason | not available |
| check_reachable | yes |
| check_recent_commit | yes |
| check_installable | yes |
| handshake_status | gated |
| handshake_checked_at | 2026-09-07T18:58:53Z |
| handshake_protocol_version | not available |
| handshake_auth_hint | Bearer resource_metadata=https://mcp.scorecard.io/.well-known/oauth-protected-resource/mcp |
| handshake_auth_discoverable | url |
| handshake_failure_layer | none |
| handshake_latency_ms | 327 |
| handshake_tools_state | not available |
| handshake_tool_count | not available |
| maintenance_status | active |
| last_commit_at | 2026-08-14T22:15:08Z |
| category | ai-ml |
| license_spdx | Apache-2.0 |
How to install or connect
Connect your MCP client to https://mcp.scorecard.io/mcp.
What the checks mean
alive combines the applicable repository, package, and endpoint checks. A null result is not verifiable, not a failure. The MCP handshake is a separate structural probe and is not a security audit. Read the methodology.