Every server in the gate directory carries a live tool list and a security grade. Scan yours, and if it grades B or better, submit it for review.
Streamable-HTTP endpoint, reachable without sign-in. The scan takes ~30 seconds.
Paste your Streamable-HTTP endpoint. gate connects, lists the tools and grades them for prompt injection, hidden instructions and over-broad permissions.
At grade B or better, a short form opens — prefilled from your server card and registry entry where we can. Two minutes.
A human checks the listing against the guidelines below and you get an email either way, usually within a few days.
The endpoint must complete the MCP handshake and list tools without sign-in. SSE-only and stdio servers can't be listed.
No high-severity findings. Fix what the scan flags, redeploy, scan again.
Descriptions say what a tool does and when to use it — no instructions to the model, no promo copy, no hidden text.
Prefer separate tools for reading and for changing data, with readOnlyHint / destructiveHint annotations. Not required, but reviewers look for it.
Optional at submit time, but listings without one are marked as such and reviewed more strictly.
No identity recognition, tracking of people, or tools that move funds or assets.
No. Listing is free, the scan is free, and the grade is re-checked weekly for free. Authors who want alerts when a tool changes or the grade drops can monitor their server in gate (paid).
Not through this form yet — the scanner can't grade what it can't reach. Publish the server in the official MCP registry: gate imports it within a day and lists it as a sign-in server.
Deterministic checks (prompt-injection patterns, hidden Unicode, exfiltration hints, over-broad permissions, oversized definitions) plus a Claude review of every tool description. 100 points minus deductions; A ≥ 90, B ≥ 78.
Reply to your listing email for now. Author accounts with self-serve edits are next on the roadmap.
You can still submit it. Leave the ownership box unchecked; the listing won't carry the verified-author mark until the operator claims it.