‹ directory
79MCP SCORE
C
arroway
https://www.arroway.app/api/mcp
19 tools~6.8k tok/req100% annot.proto 2026-07-28
Score by pillar
Security ·20100
Tool design ·1862
Schemas / desc ·1680
Reliability ·14100
Context-cost ·1253
Compliance ·12100
Coverage ·870
reliability: LOW (T1 single-shot, not credited - requires T3 >=24h)
Context-cost
6.8ktokens for
tools/listPaid on every request. Lean footprint for 19 tools.
this server6.8k
median≈ 3k
MCP primitive coverage
the quality score covers tools19
Tools
0
Resources · none
0
Prompts · none
Why this score — causal attribution
Each penalty: measure → mechanism → effect → Δscore.
Compliance · LOW−0.6
no OAuth discovery (.well-known missing) → RFC 9728/8414 not exposed → auth not auto-discoverable by clients
Suggested composite optimizations
arroway_export ↔ arroway_import →
renommer pour distinguerBadge — paste it in your README
[](https://checkmcp.dev/report?url=https%3A%2F%2Fwww.arroway.app%2Fapi%2Fmcp)Own this server?Get verified — fresh re-audit, badge if you pass ›
About arroway — FAQ
Is the arroway MCP server safe to use?+
CheckMCP audited arroway and gave it an MCP Score of 79/100 (grade C) — moderate — some quality or security gaps worth reviewing. The audit runs an OWASP MCP Top 10 security pass (tool poisoning, hardcoded secrets, command injection, the lethal trifecta) against the live endpoint; see the per-pillar breakdown and the "why this score" attribution on this page, and re-audit anytime at checkmcp.dev.
What is the MCP Score of arroway?+
arroway scores 79/100 (grade C) on CheckMCP's vendor-neutral audit across six weighted pillars — security, tool design, schemas, context-cost, compliance and coverage — with reliability measured and shown but not yet credited.
How many tools does arroway expose, and what is its context cost?+
arroway exposes 19 tools, and its tools/list response costs roughly 6.8k tokens — paid on every request your agent makes to it. Lower is better for your context budget.
How was arroway scored?+
By probing the live MCP endpoint (https://www.arroway.app/api/mcp), inspecting its tools, schemas and protocol compliance, running an OWASP MCP Top 10 security pass, and measuring the token cost of tools/list — then attributing every penalty as measure → mechanism → effect. The methodology is open: checkmcp.dev/#methodology.