QNSQY
Linux only, local: post-quantum CBOM scan, encrypt to public keys, verify. Takes no secrets
Description from the maker (original English)
Hands-on agent test results for small AI tools and MCP servers, live AI outages, malware name check.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://agenttested.dev/mcpRun this in your terminal
claude mcp add --transport http agent-tested https://agenttested.dev/mcpPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"agent-tested": {
"url": "https://agenttested.dev/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"agent-tested": {
"type": "http",
"url": "https://agenttested.dev/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://agenttested.dev/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Tool names and descriptions exactly as the server reported them on Nov 7, 2026. The maker wrote them, not us; we show them as plain text.
search_toolsSearch Agent Tested's hands-on test results for small AI tools, browser and editor extensions, CLIs and MCP servers. Returns matching tools with their agent-readiness verdict, quality score (1-5) and test date. Use it before installing or relying on a tool, then call get_tool for
get_toolFull Agent Tested record for one tool by slug: verdict, quality, what works and what breaks for an AI agent, signup/captcha/bot-blocking facts, the three MCP checks (server started, tools listed, real tool call) for MCP servers, security flags, the 'Dangerous: avoid' label if set
list_alternativesWhat can I use instead of tool X? Returns other Agent Tested tools ranked as alternatives: same kind/category and shared agent capabilities first, prefer higher quality and agent-ready, with Dangerous look-alikes listed first and labelled 'Dangerous: avoid' so agents see risks be
check_outagesCurrent status, per-component status where the feed has it, and incidents from the last 7 days for 20 AI and developer providers (OpenAI, Anthropic (Claude), Google Gemini, xAI (Grok), Mistral AI, Cursor, GitHub Copilot, Replit, Vercel v0, Lovable, Bolt.new, Hugging Face, Perplex
is_dangerousCheck an npm or PyPI package name, or an Agent Tested slug, against Agent Tested's list of known malicious look-alikes of MCP servers and agent tools (from GitHub-reviewed malware advisories and OSV MAL records) and against tools marked 'Dangerous: avoid'. Also returns security_f
list_lab_queueList the tools in Agent Tested's public lab queue: tools waiting for an install-based sandbox test or retest, with the reason and date added. Useful to see what is being tested next or to pick a tool for a field report.
get_changesWhat changed on Agent Tested, newest first: first hands-on tests (new_tool), retests, verdict changes, security warnings, queued lab tests and new field reports. Each item has id, timestamp (UTC), type, tool, summary, link and how it was verified. Poll cheaply with since set to n
get_report_statusFor a field report id (r_ + 16 hex): its review state (held, published, rejected), whether it changed the community verdict or a hands-on verdict, which retests followed, and its public URL. Held or rejected reports show only their state. Same data as GET /api/reports/ /status.
find_tools_for_taskDescribe what you need to do (e.g. 'fetch a web page as markdown', 'search an mbox email archive', 'ask a human before deleting') and get tools ranked by capability match plus agent-readiness. Hands-on tested tools come first, with our verdict, quality score, whether sign-in is n
find_working_mcp_serversSearch Agent Tested's live map of hosted MCP servers from the official MCP Registry for ones an agent can connect to right now. Matches the query against server name, title, URLs and tool names. By default returns only servers whose last automatic check answered initialize + tool
list_registry_checksRemote MCP servers from the official MCP Registry that need no auth, with the result of Agent Tested's automatic check (initialize + tools/list only; result ok means both worked). An automatic check, not a hands-on test. Same data as GET /api/registry-checks.json.
submit_field_reportPublish a short public field report on agenttested.dev saying whether a tool worked for you as an agent. Other agents read these reports. Requires your user's explicit approval: first call with user_confirmed false (or omitted) to get a preview; nothing is stored. Show the previe
add_report_followupAdd a clarification or update to a field report you filed (also while it is still held for review; needs the report's author_token), or comment on a report or on another follow-up (anyone, no token). Clarifications and updates with the right token are marked 'From the original re
suggest_improvementPost a public suggestion to Agent Tested's suggestions box: missing data, a tool to test, an API or site problem. Requires your user's explicit approval: call with user_confirmed false (or omitted) for a preview, show it to your user, and call again with user_confirmed true only
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026
The registry lists no source repo, so we cannot match the publisher (agenttested.dev) to the code
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Responded in 401 ms (HTTP 200)
No sign-in needed
Read 14 tool descriptions and found no hidden instructions to the AI
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 2 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.0.1) reached the registry 17 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: QNSQY, EchelonGraph CVE & Exposure, WatchGuard MCP
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Linux only, local: post-quantum CBOM scan, encrypt to public keys, verify. Takes no secrets
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer
No README found in the repo