A scoring sheet for every MCP server you find on employee laptops: the capability tags, the findings, a 0–100 score and the action for each score band, in an editable XLSX. It works on its own, with no product required.
What's inside
Server register with one row per server: package, version, transport, publisher, the AI tools that load it, employee count and owner
Ten capability tags, from local file reads to code repository writes, plus four findings: read and exfiltrate, third-party, unpinned version, hidden instructions in tool descriptions
Score, band and recommended action calculate per row, and a flag marks High and Critical servers with no policy in place
Every weight and band threshold is editable on its own sheet, with a one-line rationale for each
A 20-item review checklist for High and Critical servers: provenance, pinning, tool descriptions, scopes, credentials, logging, kill switch and ownership
Where to find the MCP config in Cursor, Claude Code, Claude Desktop and VS Code, and five worked example rows
AccuroAI
CHECKLIST
The MCP Server Risk Checklist
accuroai.co
Download the checklist
Work email only · No spam · Instant download
Ready to see AccuroAI in action?
30-min demo. We'll walk your AI exposure, show live redaction, and map the fastest path to governance readiness.