Mmcp.market

Is Tapp MCP server safe?

Yes, with the usual care.

A85/100grade A

Passed every safety check we run. Maintained, authenticated, reachable, clean scan.

No critical or high findings in the latest scan.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium
  • Code scan40 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    mcp-server/src/web-explorer.js: …audit. const links = await page.$$eval("a[href]", (as) => as.map((a) => ({ …
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Tapp does

  • Tiniest Cloud
    Deploy web apps with sign-in, per-user storage, realtime and AI built in.
    A
  • Flux Cloud
    Deploy, pay for and manage apps on Flux Cloud, the decentralized cloud. Prices in USD.
    A
  • Boat House
    Deploy and share small apps with team login, persistent data, versioned updates and domains.
    A

Tapp reviews, tools and install