Hi team 👋
I ran a free security scan of tavily-ai/tavily-mcp using MCPSafe — a purpose-built scanner for MCP servers that uses a 5-LLM consensus panel to detect prompt injection risks, over-scoped tool schemas, supply chain issues, and more.
Results: 92/100 · Grade B
| Severity |
Count |
| 🔴 Critical |
0 |
| 🟠 High |
0 |
| 🟡 Medium |
2 |
| 🟢 Low |
0 |
Summary: 2 medium-severity findings — near excellent security posture
📋 Full report with findings and evidence: https://mcpsafe.io/registry/github/tavily-ai/tavily-mcp
Add a security badge to your README
Paste this into your README to show users the current security status:
[](https://mcpsafe.io/registry/github/tavily-ai/tavily-mcp)
This badge auto-updates whenever a new scan runs.
Feel free to close this if you're already tracking these findings. Happy to answer any questions about the methodology or specific issues.
— Truong BUI · mcpsafe.io
Hi team 👋
I ran a free security scan of tavily-ai/tavily-mcp using MCPSafe — a purpose-built scanner for MCP servers that uses a 5-LLM consensus panel to detect prompt injection risks, over-scoped tool schemas, supply chain issues, and more.
Results: 92/100 · Grade B
Summary: 2 medium-severity findings — near excellent security posture
📋 Full report with findings and evidence: https://mcpsafe.io/registry/github/tavily-ai/tavily-mcp
Add a security badge to your README
Paste this into your README to show users the current security status:
This badge auto-updates whenever a new scan runs.
Feel free to close this if you're already tracking these findings. Happy to answer any questions about the methodology or specific issues.
— Truong BUI · mcpsafe.io