Guides
MCP guides
Trust and security reviews, comparisons, and integration how-tos for the Model Context Protocol ecosystem.
Product walkthroughs
- Install the mcpindex gate and watch your first HOLDThe gate installed and wired into your MCP hosts, and a live contract change held right in front of you, so you know exactly what a HOLD looks like before it matters.~4 min
- How to vet MCP servers before you install themA clear read on any MCP server before you wire it: what your agent could do with it, whether its description hides anything, and where it sits in the directory.~3 min
- Read your Gate Activity (mcpindex receipts)Your install's private receipt log, decoded: which tool ran, the verdict, and the action on each row, with the guarantee that no arguments or content are ever stored.~2 min
- Tune how strictly the gate holds (postures)You understand Monitor, Guard, and Strict by toggling them on the live demo, and you know how to set the one you want for the way you installed the gate.~3 min
- Integrate the gate in your own code (SDK)The gate's contract pin running inside your own MCP server in a few lines, with the HOLD handled and the baseline persisted correctly for your language.~3 min
- Get an mcpindex API key from the CLIA free API key minted from your terminal in under a minute, stored locally at ~/.mcpindex/credentials.json, with a clear picture of what the login flow does and does not store.~2 min
- Read the public drift ledger and dashboardYou can read the public drift ledger and dashboard: what the crawler saw change, how to spot a safety-relevant diff, and what the coverage numbers do (and do not) mean.~3 min
- Add mcpindex trust checks to a Mastra agentYour Mastra agent asks mcpindex whether an MCP tool is vetted before it invokes it, warning you (or blocking the call) on your terms, fail-closed.~3 min
Guides
- What an mcp.json audit tells you, and what it cannot
- Find the right MCP server by task
- How to trust an MCP server before you connect it
- Install the mcpindex gate in Claude, Cursor, Gemini CLI, Cline, or Zed
- Is it safe to let an AI agent call an MCP tool?
- MCP needs a lockfile. Call it mcp.lock.
- MCP scanners vs gateways: what each catches - and the contract-integrity gap
- MCP rug pulls and silent contract drift - what they are and how to HOLD them
- MCP tool trust vs authentication: what allow-lists do not cover
- Screen an MCP server before you install it
- Why your MCP scan has no green checkmarks