Guides
MCP guides
Trust and security reviews, comparisons, and integration how-tos for the Model Context Protocol ecosystem.
Product walkthroughs
- Install the mcpindex gate and watch your first HOLDThe gate installed and wired into your MCP hosts, and a live contract change held right in front of you, so you know exactly what a HOLD looks like before it matters.~4 min
- How to vet MCP servers before you install themA clear read on any MCP server before you wire it: what your agent could do with it, whether its description hides anything, and where it sits in the directory.~3 min
- Read your Gate Activity (mcpindex receipts)Your install's private receipt log, decoded: which tool ran, the verdict, and the action on each row, with the guarantee that no arguments or content are ever stored.~2 min
- Tune how strictly the gate holds (postures)You understand Monitor, Guard, and Strict by toggling them on the live demo, and you know how to set the one you want for the way you installed the gate.~3 min
- Integrate the gate in your own code (SDK)The gate's contract pin running inside your own MCP server in a few lines, with the HOLD handled and the baseline persisted correctly for your language.~3 min
- Get an mcpindex API key from the CLIA free API key minted from your terminal in under a minute, stored locally at ~/.mcpindex/credentials.json, with a clear picture of what the login flow does and does not store.~2 min
- Read the public drift ledger and dashboardYou can read the public drift ledger and dashboard: what the crawler saw change, how to spot a safety-relevant diff, and what the coverage numbers do (and do not) mean.~3 min
- Add mcpindex trust checks to a Mastra agentYour Mastra agent asks mcpindex whether an MCP tool is vetted before it invokes it, warning you (or blocking the call) on your terms, fail-closed.~3 min
- Connect 1ly.storeYou will have io.github.1lystore/mcp-server connected to Claude Code, with the 1ly.store buy/sell and token-launch tools callable from the client.~5 min
- Setup Eurostat MCP ServerAt the end of this process, you will have the io.github.cyanheads/eurostat-mcp-server working with your MCP client.~5 min
- mcp-server SetupThe reader will have the io.github.infino-ai/mcp-server connected to their MCP client at the end of this guide.~5 min
- Connect PortfolioYou will have the io.github.nirholas/portfolio-mcp server working with Claude Code at the end of this guide.~5 min
- Connect UmbrielYou will have io.github.ObscuritySRL/umbriel connected to Claude Code and accessible through the client tools.~5 min
Guides
- What an mcp.json audit tells you, and what it cannot
- Find the right MCP server by task
- How many MCP servers change their tool definitions after publishing?
- How to monitor MCP servers for tool description drift
- How to trust an MCP server before you connect it
- Install the mcpindex gate in Claude, Cursor, Gemini CLI, Cline, or Zed
- Is it safe to let an AI agent call an MCP tool?
- MCP needs a lockfile. Call it mcp.lock.
- MCP scanners vs gateways: what each catches - and the contract-integrity gap
- MCP rug pulls and silent contract drift: how to HOLD them
- MCP tool trust vs authentication: what allow-lists do not cover
- Pinning MCP tool contracts: five ways we got it wrong
- Screen an MCP server before you install it
- What is MCP 2.0? The 2026-07-28 revision, explained and measured
- Why your MCP scan has no green checkmarks