CertScore.ai MCP Light

Is CertScore.ai MCP Light server safe?

• No hidden instructions were found in its tool descriptions.
• Its error messages showed no secrets or internal details.
• 3 of its 4 tools are labeled read-only; the others may change or send things.
• Overall it scored 84/100 on 22 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

4 tools, in the server's own words.

Test results

Safe mode: only tools labeled read-only were run. How the test works

• !
  Ready for the newest MCP version

  1 warning

  • !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
  note
• !
  Every tool is described

  1 warning

  • !certscore_get_report_evidence_page: Inputs with no description: scanId, cursor, workpaper, section
  note
• !
  Resources and prompts work

  5 warnings (2 resources, 3 prompts)

  • !certscore_launch_review: Inputs with no description: url
  • !certscore_compare_scans: Inputs with no description: beforeScanId, afterScanId
  • !certscore_remediation_checklist: Inputs with no description: scanId
  • !certscore_compare_scans: Could not open it with sample inputs: MCP error -32602: Invalid arguments for prompt certscore_compare_scans: Invalid uuid at beforeScanId Invalid uuid at afterScanId
  • !certscore_remediation_checklist: Could not open it with sample inputs: MCP error -32602: Invalid arguments for prompt certscore_remediation_checklist: Invalid uuid at scanId
  • and 3 more
  note
• ✓
  ConnectsConnected in 527 ms
  pass
• ✓
  Lists its toolsFound 4 tools
  pass
• ✓
  Tools are labeled safe or dangerousEvery tool has a safety label
  pass
• ✓
  No hidden instructionsNo hidden instructions found in tool descriptions
  pass
• ✓
  Tools work with good inputs

  All good

  • ✓certscore_get_scan_status: Answered with an error, probably because of our sample input: {"error":{"code":"invalid_scan_id","field":"scanId","message":"Invalid scanId. Use the unchanged UUID returned by certscore_scan_site. This…
  • ✓certscore_get_report_evidence_page: Answered with an error, probably because of our sample input: {"error":{"code":"invalid_arguments","message":"The scanId field is invalid.","field":"scanId","retryable":false,"retryAfterSeconds":null,"…
  • ✓certscore_get_scan_bundle: Answered with an error, probably because of our sample input: {"error":{"code":"invalid_scan_id","field":"scanId","message":"Invalid scanId. Use the unchanged UUID returned by certscore_scan_site. This…
  • –certscore_scan_site: Not run: labeled as changing data
  pass
• ✓
  Bad inputs give a clean error

  All good

  • ✓certscore_get_scan_status: Refused missing required input "scanId" with a clear error
  • ✓certscore_get_scan_status: Refused wrong type for "scanId" with a clear error
  • ✓certscore_get_report_evidence_page: Refused missing required input "scanId" with a clear error
  • ✓certscore_get_report_evidence_page: Refused wrong type for "scanId" with a clear error
  • ✓certscore_get_scan_bundle: Refused missing required input "scanId" with a clear error
  • ✓certscore_get_scan_bundle: Refused wrong type for "scanId" with a clear error
  pass
• ✓
  Fast enough

  All good

  • ✓Connecting took 527 ms
  • ✓Listing tools took 493 ms
  • ✓Average tool answer: 304 ms
  • ✓certscore_get_scan_status: Slowest tool: certscore_get_scan_status (731 ms)
  pass
• ✓
  No secrets leakedChecked 9 error messages: no secrets or internal details
  pass
• –
  Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)
  not tested

Test it yourself

Free and open source. Same checks, same score.

Score over time

• 22 Oct 202684

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use CertScore.ai MCP Light, signed in with GitHub, one per person. Reviews never change the score.