Taimoor here, one of two founders.
We've run 79 of the most-used MCP servers so far, only 31 came back fit. The one that got me: Heroku's own official MCP server comes back not fit, high severity, it can run arbitrary commands built from tool args. Record's public: usethrone.dev/server/heroku-mcp-server
Honest about where it's at: right now it's protocol replay + static rules, the deeper syscall-level tracing is still being built. Free, no signup, throw any server at it.
Curious what'd make you actually put this in CI before your agents run something?
Taimoor here, one of two founders. We've run 79 of the most-used MCP servers so far, only 31 came back fit. The one that got me: Heroku's own official MCP server comes back not fit, high severity, it can run arbitrary commands built from tool args. Record's public: usethrone.dev/server/heroku-mcp-server Honest about where it's at: right now it's protocol replay + static rules, the deeper syscall-level tracing is still being built. Free, no signup, throw any server at it.
Curious what'd make you actually put this in CI before your agents run something?
[dead]