← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionAgent ScanSecurity scanner for AI agents, MCP servers and agent skills to detect prompt injections and vulnerabilities.Context7Upstash's official server providing up-to-date third-party library docs for AI coding assistants
FMRS58 / 100 · C80 / 100 · B
Reliability7 / 2014 / 20
Security and permissions12 / 2016 / 20
Maintenance16 / 2017 / 20
Documentation15 / 2015 / 20
Setup experience8 / 2018 / 20
Best for
  • Security teams to monitor company-wide agent supply chain risk
  • Developers to quickly assess security of their MCP servers and skills
  • Evaluating third-party MCP configs in sandboxed environments
  • Developers using fast-moving frameworks/libraries worried about the AI suggesting stale code
  • Scenarios wanting zero-config documentation lookup
Not for
  • Users needing stable programmatic output (CLI output is experimental and may change)
  • Production workflows depending on specific CLI output fields
  • Scanning non-stdio MCP servers (only stdio is supported)
  • Looking up internal/private codebase documentation (Context7 targets publicly published open-source libraries)
  • Cases needing very high coverage of obscure, niche libraries (coverage depends on what Context7's platform has indexed)
Required permissions
  • Requires SNYK_TOKEN environment variable to call Snyk API
  • Executes commands defined in MCP configurations (stdio server startup)
  • Reads local agent configuration files (e.g., ~/.claude/skills)
  • Usable without an API key (subject to a free-tier rate limit); CONTEXT7_API_KEY is an optional credential for higher quota
  • Read-only documentation lookup — no code execution or local filesystem access involved
Risks and side effects
  • Scanning MCP configurations executes their commands, posing risk of malicious code execution
  • Skills, app names, and tool descriptions are shared with Snyk (usage implies consent)
  • CLI output is experimental and subject to change
  • Large-scale API usage may result in account blocking
  • The free tier has limited quota — high-frequency use may hit rate limits
  • Documentation content comes from Context7's platform index, so its accuracy and freshness depend on that platform's crawl cadence
Supported clientsClaude Desktop, Claude Code, Cursor, VS Code, Windsurf, Gemini CLI, Amazon Q, Amp, Kiro, OpenCode, Antigravity, Codex, OpenClawClaude Code, VS Code, Cursor, Cline, Amp
Tools02