Taimoor here, one of two founders.
We've run 79 of the most-used MCP servers so far, only 31 came back fit. The one that got me: Heroku's own official MCP server comes back not fit, high severity, it can run arbitrary commands built from tool args. Record's public: usethrone.dev/server/heroku-mcp-server
Honest about where it's at: right now it's protocol replay + static rules, the deeper syscall-level tracing is still being built. Free, no signup, throw any server at it.
Curious what'd make you actually put this in CI before your agents run something?