A Pass composite 100 / 100 · pinned commit 8c02eedf0fbf · ruleset pack-mcp-core@0.1.0 · 28,489/wk
Tool-description injection w20 100
Credential / secret handling w20 100
Network egress / SSRF w20 100
Permission scope vs declared w25 100
Supply-chain provenance w15 100
✓ No findings. Every dimension scored clean at this commit under ruleset pack-mcp-core@0.1.0.
Embed this grade MCP security: grade A MCP security A Grade A — Pass
[](https://sentinel-engine-ggaj.onrender.com/registry/tavily-ai__tavily-mcp.html)
🔁 Verify it yourself: clone tavily-ai/tavily-mcp at 8c02eedf0fbf and run the open scanner (anwen-labs/sentinel-mcp , ruleset pack-mcp-core@0.1.0). Same input → same grade, every time.