Skip to content
RangerCheck logo

RangerCheck MCP server

Which servers in the official MCP registry are RangerCheck's own, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-21

← Back to RangerCheck

Whose server it is
  • Registry namecom.rangercheck/security-toolsverified in the MCP registry

The registry name sits under rangercheck.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-21
  • Stateanswerschecked 2026-10-21
  • Tools1
  • Server calls itselfrangercheck
  • Server version1.0.0
  • Protocol version2025-06-18

On 2026-10-21 the server answered initialize and tools/list without a sign-in. First answer in 216 ms.

Should an agent connect itNot proven either way yet
  • Whether its tools do the product's job has not been judged yet.
  • Checked on 6 of the 7 days it takes to judge reliability.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

Measured dailydaily checks: 6, the first on 2026-10-21
  • INITE MCP scoreafter a weeka score needs 7 daily checks: 6 so far
  • Answeredmeasuring6 of the 7 daily checks it takes to print a share
  • Median first answer211 ms
  • Space in an agent's context≈ 184 tokensthe definitions of all its tools (1), which an agent carries on every turn
  • Tool definitionsB · 83 of 100
  • Typed results0 of 1 toolsdeclared outputSchema: results come typed, read once
  • Not saying whether it only reads or can destroy: 1 of 1

What an agent can do with it

  • not sure · find API keys and secrets exposed in front-end code
  • not sure · spot public source maps that reveal app structure
  • not sure · check database rules and security headers for gaps

Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?

Worth a look

None of the five warning signs in these definitions.

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (30%), doing the product's job (25%), definitions (20%), context (10%) and use (15%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

Tools it offers1 tools · read 2026-10-21
  • scan_security

    Run a free front-end security check on any website and get a letter grade (A to F) plus specific findings. Answers questions like 'is example.com leaking API keys or secrets in its front-end code', 'does this site expose a…

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "security-tools": {
      "type": "http",
      "url": "https://rangercheck.com/api/mcp"
    }
  }
}

Add it

Claude Code, in a terminal

claude mcp add --transport http rangercheck https://rangercheck.com/api/mcp

Add to CursorAdd to VS Code

claude.ai, ChatGPT and other clients: add https://rangercheck.com/api/mcp as a custom connector in the settings.

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.