CheckMCP
‹ directory
68MCP SCORE
D

NeverApply

https://neverapply.co/mcp
15 tools1 resources~13k tok/req100% annot.proto 2026-07-28
View public page ›
Xin
Raw JSON ›

Score by pillar

Security ·2075
Tool design ·1862
Schemas / desc ·1678
Reliability ·14100
Context-cost ·1230
Compliance ·1280
Coverage ·880

reliability: LOW (T1 single-shot, not credited - requires T3 >=24h)

Context-cost

13ktokens for tools/list

Paid on every request. Lean footprint for 15 tools.

this server13k
median≈ 3k

MCP primitive coverage

the quality score covers tools
15
Tools
1
Resources
0
Prompts · none

Why this score — causal attribution

Each penalty: measure → mechanism → effect → Δscore.

Security · CRITICAL−5

[MCP06] lethal trifecta: untrusted-content ingestion + sensitive-data access + exfil/destruction -> an injection can exfiltrate → MCP security flaw → tool: (serveur)

Schemas / desc · HIGH−3.5

53% typed+described params → schema = the contract the agent fills in → more malformed calls

Compliance · MEDIUM−1.7

JSON-RPC-compliant errors 1/2 → errors not compliant with the JSON-RPC spec → clients break unpredictably

Compliance · MEDIUM−1.2

capability 'prompts' declared but prompts/list empty → inconsistent capabilities → clients misled

Security — OWASP MCP Top 10

MCP06CRITICAL(serveur)

Badge — paste it in your README

MCP Score badge — NeverApply[![MCP Score](https://checkmcp.dev/badge/neverapply-co.svg?url=https%3A%2F%2Fneverapply.co%2Fmcp)](https://checkmcp.dev/report?url=https%3A%2F%2Fneverapply.co%2Fmcp)
Own this server?Get verified — fresh re-audit, badge if you pass ›

About NeverApply — FAQ

Is the NeverApply MCP server safe to use?+
CheckMCP audited NeverApply and gave it an MCP Score of 68/100 (grade D) — weak — significant issues; review the findings before trusting it with sensitive data or tools. The audit runs an OWASP MCP Top 10 security pass (tool poisoning, hardcoded secrets, command injection, the lethal trifecta) against the live endpoint; see the per-pillar breakdown and the "why this score" attribution on this page, and re-audit anytime at checkmcp.dev.
What is the MCP Score of NeverApply?+
NeverApply scores 68/100 (grade D) on CheckMCP's vendor-neutral audit across six weighted pillars — security, tool design, schemas, context-cost, compliance and coverage — with reliability measured and shown but not yet credited.
How many tools does NeverApply expose, and what is its context cost?+
NeverApply exposes 15 tools, and its tools/list response costs roughly 13k tokens — paid on every request your agent makes to it. Lower is better for your context budget.
How was NeverApply scored?+
By probing the live MCP endpoint (https://neverapply.co/mcp), inspecting its tools, schemas and protocol compliance, running an OWASP MCP Top 10 security pass, and measuring the token cost of tools/list — then attributing every penalty as measure → mechanism → effect. The methodology is open: checkmcp.dev/#methodology.