The MCP hub › Alternatives › mcpservers.org
mcpservers.org and the "awesome MCP servers" lists do one thing: show you a server exists. They can't tell you whether connecting it is safe — whether it'll quietly rug-pull its tools after you wire it into your agent. wmcp.sh grades every MCP server A–F on security, spec conformance, reliability, and transparency, and re-checks them on a schedule. A directory, plus the trust layer a list can't give you.
| wmcp.sh | mcpservers.org | |
|---|---|---|
| Independent A–F trust grade per server | ✓ every server | ✗ — just a listing |
| Security audit (OWASP MCP Top 10) | ✓ | ✗ |
| Continuous rug-pull / drift watch | ✓ re-checked on a schedule | ✗ static entry |
| Tells you which servers are safe to connect | ✓ | ✗ you decide blind |
| Browse / compare by category | ✓ ranked by trust | ✓ ranked by listing |
| Connect & govern (OAuth proxy, kill-switch) | ✓ via /connect | ✗ |
| Turn any website into agent tools (WebMCP) | ✓ | ✗ servers only |
wmcp.sh. mcpservers.org is a directory — a list of MCP servers. wmcp.sh is a directory that independently grades every server A–F on security, spec conformance, reliability, and transparency, and re-checks them on a schedule for rug-pulls and tool drift. You don't just find a server, you find out whether it's safe to connect.
Yes — the wmcp.sh trust leaderboard grades every MCP server A–F and flags rug-pulls (servers that silently change their tools after you connect). A plain directory like mcpservers.org or 'awesome MCP servers' lists servers but can't tell you which are trustworthy.
The grades and the leaderboard are free and identical whether or not an operator pays. Paid tiers add continuous monitoring, the managed OAuth proxy, and the WebMCP API for turning any site into agent tools.