CodeFlowOps provides a free, read-only security and conformance scanner for Model Context Protocol (MCP) servers, a public MCP Security Index, and a waitlist for future paid features. Scans perform standard protocol requests and safe configuration probes; they do not execute tools and do not write to scanned systems.
By submitting a URL you represent and warrant that you own the target system or have the operator's permission to test it. You are solely responsible for submissions made through your access. We may refuse, rate-limit, or block scans and users at our discretion, and we cooperate with lawful requests concerning misuse.
Scan reports are stored and reachable by anyone holding the report link. The Security Index publishes letter grades and finding categories for well-known publicly reachable MCP servers, based on the same safe, read-only checks available to anyone; operators can contact us for re-scans or corrections at any time.
The service is provided "as is" and "as available", without warranties of any kind, express or implied. A high grade is not a guarantee that a system is secure; a low grade is not an assertion of compromise. Findings are automated checks against published specifications and guidance and may contain errors. Nothing here is legal or compliance advice.
To the maximum extent permitted by law, ClayDesk LLC is not liable for any indirect, incidental, special, consequential or exemplary damages, or any loss of profits, data or goodwill, arising from use of the service. Our total aggregate liability for any claim relating to the service is limited to one hundred US dollars (US $100).
You may not use the service to attack, disrupt or gain unauthorized access to systems; probe targets you are not authorized to test; circumvent rate limits; or resell scan output as your own certification. The scanner is independent and issues no official MCP certification; do not represent results as endorsement by Anthropic, the MCP project, NSA/CISA, or OWASP.
We may modify or discontinue the service, or update these terms, at any time; the date above reflects the current version. Continued use after changes constitutes acceptance.
These terms are governed by the laws of the State of Texas, USA, excluding conflict-of-law rules. Venue lies in the state or federal courts of Collin County, Texas.
ClayDesk LLC · support@codeflowops.com