MCP.so
Depends
Confidence: Medium
Fine as a free browsing aid for developers hunting MCP servers and clients; not a vetted or supported channel.
New check
Comparison
MCP.so lands on Depends, and Terraform Registry lands on Worth it.
Fine as a free browsing aid for developers hunting MCP servers and clients; not a vetted or supported channel.
Free and effectively mandatory if your team uses Terraform . just treat community modules as untrusted code.
| Compare | ||
|---|---|---|
| Verdict | Depends | Worth it |
| Best for | Developers browsing MCP servers | Terraform teams sourcing providers and modules |
| Who it's not for | Enterprises needing vetted, audited integrations | Teams wanting private modules without paying for HCP Terraform |
| Privacy | No known public vulnerabilities found in the sources reviewed.⁷ | No registry-specific CVE found in sources, but public modules are a documented supply-chain attack vector . pin versions.16 |
| Support quality | No support evidence found | No support evidence in sources |
| Public sentiment | Independent guides describe as a community-driven directory for discovering MCP servers, but genuine user reviews are sparse. | Public discussion centers on module vetting and private registry choices; the free registry itself draws few direct complaints. |
| Biggest gotcha | Ecosystem-wide MCP risks: tool poisoning, malicious servers, exploit demos listed⁹ | Treat public modules as untrusted: research showed module-poisoning and account-takeover supply-chain paths15 |