Vetnek, a version-pinned security registry for MCP servers

Why it surfaced

The registry indexes 23,931 servers and tracks 78,216 versions, while carefully separating clean results from packages it could not read and remote-only servers it cannot inspect. Its central warning is unusually sound: a verdict applies to the exact version scanned, not the code that may ship tomorrow.

Vetnek statically scans published MCP server packages for tool poisoning, exposed secrets, supply-chain issues, capability mismatches, and code signals.