Making AI Tooling Trustworthy
MCP-Hub is the trust layer for the Model Context Protocol ecosystem. We analyze, certify, and govern MCP servers so teams can adopt AI tooling with confidence.
The Problem
AI agents are rapidly adopting the Model Context Protocol to interact with external tools and data. But most MCP servers run with full system access, no security review, and no governance.
A single compromised tool can exfiltrate credentials, inject prompts, or escalate privileges — all without the user ever knowing.
The MCP ecosystem needs a trust layer. That's why we built MCP-Hub.
Our Approach
A three-step pipeline from code to trust
Analyze
Cada servidor MCP se analiza frente a 14 clases de vulnerabilidades usando modelos de deep learning propietarios, análisis de taint avanzado y pattern matching multi-pasada
Certify
Deterministic scoring produces certification levels 0-3, backed by immutable snapshots and reproducible evidence
Govern
Organizations enforce policies on what can run, with audit trails, RBAC, and compliance reporting
Our Values
Transparency
Every score is deterministic and reproducible. Every finding is backed by evidence. No black boxes.
Security First
Every design decision starts with security. Immutable snapshots, content-addressed artifacts, and deterministic scoring leave no room for ambiguity.
Developer Experience
Security tools should empower developers, not slow them down. We prioritize clean APIs, fast feedback, and seamless CI/CD integration.
Open Source
Our analyzer and client are open source. Audit the tools that audit your tools.
Residencia de datos europea
Infraestructura alojada en centros de datos europeos (Hetzner, Alemania). Tus datos permanecen en la UE, cumpliendo con el RGPD y los requisitos de soberania de datos europea.
Nuestros Fundadores
Creado por veteranos de la ciberseguridad con décadas de experiencia protegiendo infraestructura crítica
Daniel García
@cr0hn
Cofundador+20 años en ciberseguridad. 100+ proyectos open source (3500+ estrellas en GitHub). Herramientas en Kali Linux y BlackArch. Ponente en RSA Conference, RootedCON y OWASP Madrid. Top 50 profesionales DevSecOps más influyentes. Ex 42Crunch.
LinkedIn
Dr. Alfonso Muñoz
@mindcrypt
CofundadorDoctor en Telecomunicaciones por la UPM. +20 años en ciberseguridad. 60+ publicaciones, 6 libros, 2 patentes. Ponente en BlackHat USA/EU/Asia, DEF CON, HITB. Creador de Powerglot y StegoWiper. Google Bug Hunter. Experto Europol EC3. Ex SandboxAQ e IOActive.
LinkedInOpen Source at the Core
Core components of MCP-Hub are open source. We believe transparency is essential to building trust in security tooling.
MCP Cage — CLI launcher with sandboxing and policy enforcement
Resuelve, descarga, valida y ejecuta paquetes MCP certificados con políticas de seguridad integradas, límites de recursos y aislamiento específico por plataforma.
mcp-scan — Static security analyzer for MCP servers
Detecta 14 clases de vulnerabilidades mediante modelos de deep learning propietarios entrenados con cientos de miles de muestras, análisis de taint y pattern matching multi-pasada en Python, TypeScript, JavaScript y Go.
Ready to Get Started?
Join the growing community building trustworthy AI tooling