Find the Lethal Trifecta in your agents

Paste your mcp.json and get a blast-radius report in seconds. We classify every server into untrusted input, sensitive access, and external comms, then flag the dangerous combinations. Read-only — no credentials, no sign-up, nothing stored.