mcp-name: io.github.CSOAI-ORG/mcp-scorecard-mcp
mcp-scorecard-mcp
Score any MCP server against a 100-point production-readiness rubric — static (AST + filesystem), PyPI health, and directory-presence signals. The engine is stdlib-only (no deps to score).
Rubric (10 categories, 100 pts)
readme · tool design (names + descriptions) · examples · tests/CI · transports (stdio/http) ·
metadata (server.json, license) · reliability (importable, versioned) · security · docs surface ·
provenance (PAYG/Stripe/attestation, directory listings).
Use
# score one package dir
python -c "from mcp_scorecard import collect_static, score, score_to_row; \
import json; print(json.dumps(score_to_row(score(collect_static('.'))), indent=2))"
# batch-score a whole marketplace tree → leaderboard JSON + CSV
python -m mcp_scorecard.runner --root ./mcp-marketplace --out ./scoreboard --no-network
# (drop --no-network to fold in live PyPI download stats)
Why
A buyer's-eye quality signal for the MCP explosion: is a server actually production-ready, or a stub? Powers the MEOK lead-magnet scorecard and our own flagship-tier triage.
Live example (MEOK marketplace, 2026-06-07, static-only)
338 packages scored · mean 62.9/100 · 110 flagship-grade.
Top: iso-27001-ai-mcp (84), proofof-ai-mcp (79), eu-ai-act-compliance-mcp (78).
Optional: run as an MCP server
pip install "mcp-scorecard-mcp[server]" then run the score_mcp tool (see server.py).
Part of the MEOK constellation
This MCP is one node in a connected ecosystem built by MEOK AI LABS around a single sovereign AI core — governed agents with a hash-chained audit trail, mapped to the CSOAI compliance charter.
- 🌐 The whole map: https://meok.ai/constellation
- 🛡️ AI governance & certification: https://councilof.ai · https://csoai.org
- ✅ Verify any signed report: https://meok.ai/verify
1 maintainer
Metadata
1 maintainer
Release files for mcp-scorecard-mcp 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| mcp_scorecard_mcp-0.1.1-py3-none-any.whl | Python 3 | none | any | Details for mcp_scorecard_mcp-0.1.1-py3-none-any.whl |
Release files / mcp_scorecard_mcp-0.1.1-py3-none-any.whl
| Download URL | mcp_scorecard_mcp-0.1.1-py3-none-any.whl |
|---|---|
| Size | 13.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f03b62cdf669e04a42c13f72eb9cb3b8514337b0bfcb852720590bf4fe79ee30
|
|
BLAKE2b-256 checksum How to use checksums |
736ab4ff111a9f5d4704d968542c84a01b05e482f2a901186098c09727ae3547
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.10.3 {"installer":{"name":"uv","version":"0.10.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for mcp-scorecard-mcp 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
