---
title: "Comment by Andrew on \"How I evaluate MCP servers for security before I trust them\n\" | Hashnode"
description: "Registration scans help and still leave a race after connect. Tools can re-advertise after you greenlit the server. A pinned package version does not freeze the"
url: "https://hashnode.com/posts/how-i-evaluate-mcp-servers-for-security-before-i-trust-them/6a7b478cda62148d32b68a62/comment/6a7b6b8ac7fdf76c37a4a4f4"
---

[Discussion](https://hashnode.com/posts/how-i-evaluate-mcp-servers-for-security-before-i-trust-them/6a7b478cda62148d32b68a62)

Comment [How I evaluate MCP servers for security before I trust them](https://hashnode.com/posts/how-i-evaluate-mcp-servers-for-security-before-i-trust-them/6a7b478cda62148d32b68a62)

[Andrew](https://hashnode.com/@rizzdev)

[Aug 11](https://hashnode.com/posts/how-i-evaluate-mcp-servers-for-security-before-i-trust-them/6a7b478cda62148d32b68a62/comment/6a7b6b8ac7fdf76c37a4a4f4)

Registration scans help and still leave a race after connect. Tools can re-advertise after you greenlit the server. A pinned package version does not freeze the description text the model re-ingests on the next tools/list. Re-scan every refresh or the first pass is theater.