CheckMCP
‹ directory
68MCP SCORE
D

brewpage-mcp

https://brewpage.app/mcp
20 tools~7.9k tok/req100% annot.proto 2026-07-28
View public page ›
Xin
Raw JSON ›

Score by pillar

Security ·2075
Tool design ·1856
Schemas / desc ·1670
Reliability ·1450
Context-cost ·1237
Compliance ·12100
Coverage ·870

reliability: LOW (T1 single-shot, not credited - requires T3 >=24h)

Context-cost

7.9ktokens for tools/list

Paid on every request. Lean footprint for 20 tools.

this server7.9k
median≈ 3k

MCP primitive coverage

the quality score covers tools
20
Tools
0
Resources · none
0
Prompts · none

Why this score — causal attribution

Each penalty: measure → mechanism → effect → Δscore.

Security · CRITICAL−5

[MCP06] lethal trifecta: untrusted-content ingestion + sensitive-data access + exfil/destruction -> an injection can exfiltrate → MCP security flaw → tool: (serveur)

Tool design · MEDIUM−1.1

2 clusters consolidables → list/get/search/... repeated on the same object → candidates to merge into composite tools

Compliance · LOW−0.6

no OAuth discovery (.well-known missing) → RFC 9728/8414 not exposed → auth not auto-discoverable by clients

Security — OWASP MCP Top 10

MCP06CRITICAL(serveur)

Suggested composite optimizations

publish_site ↔ republish_site → renommer pour distinguer

Badge — paste it in your README

MCP Score badge — brewpage-mcp[![MCP Score](https://checkmcp.dev/badge/brewpage-app.svg?url=https%3A%2F%2Fbrewpage.app%2Fmcp)](https://checkmcp.dev/report?url=https%3A%2F%2Fbrewpage.app%2Fmcp)
Own this server?Get verified — fresh re-audit, badge if you pass ›

About brewpage-mcp — FAQ

Is the brewpage-mcp MCP server safe to use?+
CheckMCP audited brewpage-mcp and gave it an MCP Score of 68/100 (grade D) — weak — significant issues; review the findings before trusting it with sensitive data or tools. The audit runs an OWASP MCP Top 10 security pass (tool poisoning, hardcoded secrets, command injection, the lethal trifecta) against the live endpoint; see the per-pillar breakdown and the "why this score" attribution on this page, and re-audit anytime at checkmcp.dev.
What is the MCP Score of brewpage-mcp?+
brewpage-mcp scores 68/100 (grade D) on CheckMCP's vendor-neutral audit across six weighted pillars — security, tool design, schemas, context-cost, compliance and coverage — with reliability measured and shown but not yet credited.
How many tools does brewpage-mcp expose, and what is its context cost?+
brewpage-mcp exposes 20 tools, and its tools/list response costs roughly 7.9k tokens — paid on every request your agent makes to it. Lower is better for your context budget.
How was brewpage-mcp scored?+
By probing the live MCP endpoint (https://brewpage.app/mcp), inspecting its tools, schemas and protocol compliance, running an OWASP MCP Top 10 security pass, and measuring the token cost of tools/list — then attributing every penalty as measure → mechanism → effect. The methodology is open: checkmcp.dev/#methodology.