Watching the MCP catalog right now

MCP servers change without warning. We notice.

Centinela continuously watches the third-party MCP servers your AI agent depends on — public catalog and your own private servers — and alerts you with a clear explanation the moment something changes.

No credit card · 3 monitored servers free forever

Not a theoretical risk

An MCP server can behave well for months and change overnight.

It has already happened

In September 2025, the maintainer of the official Postmark MCP server added a hidden BCC copy of every email sent to an address controlled by an attacker. It was installed as a trusted tool and changed later, without telling anyone.

It's not an isolated case

A 2026 scan of 1,808 MCP servers found that 66% had a real security finding — command injection, path traversal, hidden instructions in a tool's description.

And it's growing fast

The official MCP registry went from 100,000 downloads a month to over 97 million in a year and a half. The more third-party servers your agent connects to, the more unmonitored attack surface.

How it works

From public catalog to an actionable alert, without you having to check a dashboard every day.

01

We watch the public catalog

Every hour, without you asking — thousands of MCP servers from the official registry, compared against their previous state.

02

You add your own, with your credential

Private servers or ones that require authentication, with your own encrypted token — we never see it in plain text, or share it with anyone.

03

AI explains what changed

Not just "something's different": a plain-language explanation of whether the change is reasonable or suspicious, and why.

04

We alert you wherever you need it

By email, querying the API from your own system, asking your agent directly with our MCP server, or with a webhook to your own system (Slack, PagerDuty…).

What makes us different

Real history, not a single snapshot

Every server has its full evolution — when it changed, what changed, and whether it had happened before.

Your private servers too

With your own credential, encrypted at rest. It doesn't need to be public for us to watch it.

An explanation, not just an alarm

Every alert says why in plain language — to decide in seconds, not to investigate for half an hour.

Genuinely automatable

API with your own key on any plan, or ask your agent directly with our MCP server — paid plans.

See documentation

Pricing

Start for free. Change plans whenever you need to, no lock-in.

Free

€0/mo

3 servers

  • Continuous scanning
  • Email alerts
  • 100 API requests/month
Start for free

Starter

€19/mo

10 servers

  • Continuous scanning
  • Email alerts
  • 500 API requests/month
  • Ask your agent directly (own MCP server)
  • Webhooks to your own system
Choose Starter
Recommended

Pro

€59/mo

50 servers

  • Continuous scanning
  • Email alerts
  • 2,000 API requests/month
  • Ask your agent directly (own MCP server)
  • Webhooks to your own system
Choose Pro

Business

€199/mo

Unlimited servers

  • Continuous scanning
  • Email alerts
  • Unlimited API requests
  • Ask your agent directly (own MCP server)
  • Webhooks to your own system
  • Multiple users
Choose Business

Start watching in under a minute

No credit card. 3 servers free forever.

Create a free account