WebMCP Shield continuously scans public WebMCP endpoints for misconfigurations and exposure risk, and publishes aggregate, anonymized findings below — free, no sign-up required.
Aggregate, anonymized snapshot. Individual entries do not reveal the scanned domain.
Every domain is re-scanned on a tier-based schedule; sites with WebMCP are checked daily.
| Anonymized ID | Risk Category | Severity | First Detected |
|---|---|---|---|
| Loading current status… | |||
Connecting to the live scan API…
Publishing real domain names alongside unresolved risks could expose those organizations to harm. WebMCP Shield anonymizes public entries and shares fully attributed findings only with the affected organization directly, or with vetted requesters who need the complete dataset.
Attributed findings (real domains) are only shared with the affected site's own team, or with vetted security/defense use cases. Tell us a bit about your request.