LIVE MCP SECURITY & CONTEXT-TAX RADARโขjlowin/fastmcp (28,109 ) & modelcontextprotocol/servers
MCP Server Context-Window Tax & Security Audit
Every enabled MCP server injects its JSON-Schema tool definitions into every prompt turn. Select your active MCP servers below to audit your per-turn token tax and generate a least-privilege .cursor/mcp.json or claude_desktop_config.json.
Least-Privilege MCP GateOWASP LLM01/07
Per-Turn Schema Token Tax
2,840 tok / msg
Silent overhead before you type 1 word
Est. Schema Overhead / Dev
$9.37 / mo
At 50 turns/day on Claude Sonnet 4.6
Stack Security Posture
94.3 / 100
Hardened least-privilege args ready
OFFICIAL HOSTED MCP SERVERS (ZERO-AUTH STREAMABLE HTTP & JSON-RPC 2.0)
Install ExactBaseline Calculators & PulseForge Benchmarks in Cursor, Claude & Windsurf
1. ExactBaseline Decision Calculators MCP (4 Tools)
Endpoint:
https://exactbaseline.com/api/mcp/calculatorsTools:
calculate_mortgage_recast, calculate_marathon_splits, calculate_used_car_otd_floor, calculate_event_beverage_stock2. PulseForge AI DevTool Benchmarks MCP (3 Tools)
Endpoint:
https://exactbaseline.com/api/mcp/rpc • SSE: /mcp/sseTools:
compare_ai_tools, calculate_ai_seat_vs_token_roi, audit_github_repo_launch_readiness
Published Registry Manifests & Directories:
| Select Active MCP Server | Schema Tax | Cold Start | Sharp-Edges Footgun & Hardened Fix | PulseScore |
|---|---|---|---|---|
|
Core Local IO
|
620 tok/turn | 180 ms |
Passing $HOME or / allows prompt-injected files to exfiltrate SSH keys or .env secrets.
Fix: Pin explicit project subdirectory path only; never mount parent home directory.
|
94.0 |
|
Git & PR Automation
|
1840 tok/turn | 310 ms |
Classic repo PAT tokens grant push/delete access across all private org repositories.
Fix: Use fine-grained GitHub PAT scoped to single repository with Contents:Read and PR:Write only.
|
92.5 |
|
Database Telemetry
|
410 tok/turn | 210 ms |
Connecting with superuser DSN exposes DDL/DML mutation risk if read-only wrapper fails.
Fix: Connect via dedicated pg_read_all_data role with default_transaction_read_only=on.
|
91.0 |
|
Browser Automation
|
1490 tok/turn | 640 ms |
Persistent user-data-dir shares live session cookies with untrusted pages during scraping.
Fix: Run isolated ephemeral browser context (--isolated) with headless viewport restrictions.
|
95.0 |
|
Live SDK Documentation
|
380 tok/turn | 195 ms |
Unpinned latest npx resolution can add 400ms cold-start overhead on every IDE boot.
Fix: Low schema tax (380 tokens); pre-cache package globally or via bunx for <60ms startup.
|
96.5 |
|
Persistent Agent State
|
790 tok/turn | 165 ms |
Unbounded entity graph growth bloats JSON storage and degrades retrieval precision.
Fix: Scope MEMORY_FILE_PATH per repository so project contexts never cross-contaminate.
|
90.5 |
|
Reasoning & Planning
|
340 tok/turn | 140 ms |
Redundant when paired with native reasoning models (o3, Claude 4.6 Extended Thinking).
Fix: Enable only for non-reasoning fast models to avoid double reasoning token burn.
|
97.0 |
|
Payments & Billing
|
1120 tok/turn | 290 ms |
Passing unrestricted rk_live or sk_live keys allows autonomous refund or payout creation.
Fix: Pass restricted API key (rk_live_...) limited strictly to payment_links.write and customers.read.
|
93.5 |
Hardened .cursor/mcp.json & claude_desktop_config.json (Least-Privilege)
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"/workspace/project"
]
},
"github": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-github"
]
},
"context7": {
"command": "npx",
"args": [
"-y",
"@upstash/context7-mcp"
]
}
}
}
UNLOCK AUTOMATED GITLEAKS + SEMGREP CI WORKFLOW & 50-PROBE OWASP SUITE
Enforce MCP least-privilege boundaries on every Pull Request and claim your repo's Tier-1 Verified GitHub README Shield ($49 one-time).
Top Starred MCP Repositories on GitHub (Live Telemetry)