Is the npm:@insightsentry/mcp MCP server safe to use?
Independent trust grade B+ (89/100). Static analysis of npm package @insightsentry/mcp@1.4.30 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured. wmcp.sh continuously watches npm:@insightsentry/mcp for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.
What it offers — 29 tools · Cloud & DevOps
insightsentry
get_symbol_series
get_symbol_history
get_symbol_contracts
get_symbol_info
get_symbol_session
get_quotes
search_symbols
get_symbol_fundamentals
get_fundamentals_series
get_fundamentals_meta
get_options_contracts
get_options_snapshot
get_options_quotes
get_dividends
get_earnings
get_ipos
get_events
+11 more tools
Spec / packaging20%100
✓ depends on an MCP SDK
✓ declares a bin entry (runnable server)
✓ 29 tool(s) detected in source
Security (OWASP MCP)30%70
uses eval/exec/child_process (review for unsanitized input)
scanned 6 source files
Maintenance / popularity20%100
published within 90 days
65 published versions
Tool hygiene15%95
✓ ships TypeScript types
5 runtime deps
Transparency / provenance15%90
✓ public repository linked
✓ MIT license
Findings
INFO Static analysis of npm package @insightsentry/mcp@1.4.30 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
We re-grade npm:@insightsentry/mcp on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Share this report card
A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.
A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.