Google Compute Engine MCP Server
https://compute.googleapis.com/mcp
Remote
vESF
Published by compute.googleapis.com — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Remote MCP server for Google Compute Engine VM inventory and lifecycle operations.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 28.5 = 72. What the published surface and source actually contain:
| Points | What was found | Category |
|---|---|---|
| −28.5 | Encoded blob paired with a decode/execute instruction ×4 MTC-INJ-ENC-2 | injection |
2. Client adoption risk — 72 − 0 = 72. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
✓ No adoption-risk deductions — minimal blast radius, verified enough, and fully inspected.
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 4
high Encoded blob paired with a decode/execute instructionMTC-INJ-ENC-2
A long base64-looking blob appears alongside a decode/execute instruction — a common way to hide a payload from reviewers.
Evidence: [DEPRECATED] CSEK is no longer supported. Use CMEK instead. Specifies a 256-bit customer-supplied encryption key </compute/docs/disks/customer-supplied-encrypti
Location: tool list_instance_attached_disks · outputSchema.$defs.CustomerEncryptionKey.properties.rawKey.description
high Encoded blob paired with a decode/execute instructionMTC-INJ-ENC-2
A long base64-looking blob appears alongside a decode/execute instruction — a common way to hide a payload from reviewers.
Evidence: [DEPRECATED] CSEK is no longer supported. Use CMEK instead. Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key </comput
Location: tool list_instance_attached_disks · outputSchema.$defs.CustomerEncryptionKey.properties.rsaEncryptedKey.description
high Encoded blob paired with a decode/execute instructionMTC-INJ-ENC-2
A long base64-looking blob appears alongside a decode/execute instruction — a common way to hide a payload from reviewers.
Evidence: [DEPRECATED] CSEK is no longer supported. Use CMEK instead. Specifies a 256-bit customer-supplied encryption key </compute/docs/disks/customer-supplied-encrypti
Location: tool get_instance_template_properties · outputSchema.$defs.CustomerEncryptionKey.properties.rawKey.description
high Encoded blob paired with a decode/execute instructionMTC-INJ-ENC-2
A long base64-looking blob appears alongside a decode/execute instruction — a common way to hide a payload from reviewers.
Evidence: [DEPRECATED] CSEK is no longer supported. Use CMEK instead. Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key </comput
Location: tool get_instance_template_properties · outputSchema.$defs.CustomerEncryptionKey.properties.rsaEncryptedKey.description
Tools 29
Each tool and what it can reach — enumerated from the running server.
create_instanceno sensitive capabilitydelete_instanceno sensitive capabilityget_commitment_basic_infono sensitive capabilityget_disk_basic_infono sensitive capabilityget_disk_performance_configno sensitive capabilityget_instance_basic_infono sensitive capabilityget_instance_group_manager_basic_infono sensitive capabilityget_instance_template_basic_infono sensitive capabilityget_instance_template_propertiesno sensitive capabilityget_reservation_basic_infono sensitive capability
Show 19 more tools ↓
get_reservation_detailsno sensitive capabilityget_zone_operationno sensitive capabilitylist_accelerator_typesno sensitive capabilitylist_commitment_reservationsno sensitive capabilitylist_commitmentsno sensitive capabilitylist_disksno sensitive capabilitylist_imagesno sensitive capabilitylist_instance_attached_disksno sensitive capabilitylist_instance_group_managersno sensitive capabilitylist_instance_templatesno sensitive capabilitylist_instancesno sensitive capabilitylist_machine_typesno sensitive capabilitylist_managed_instancesno sensitive capabilitylist_reservationsno sensitive capabilitylist_snapshotsno sensitive capabilityreset_instanceno sensitive capabilityset_instance_machine_typeno sensitive capabilitystart_instanceno sensitive capabilitystop_instanceno sensitive capability
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
vESF latest |
C 72/100 | 4 | 1.13.0 | 2026-09-06 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan https://compute.googleapis.com/mcp --onlineMore in Cloud & DevOps
Operator control CLI for AdGuard Home with an MCP adapter
interacting with Aliyun (Alibaba Cloud) services through This MCP server provides tools.
MCP server for the Aspro.Cloud REST API
MCP server for Atlassian Confluence and Jira Cloud APIs
AuroraCloud-first MCP server that exposes AuroraDocs workspace data to Claude Desktop and other AI agents
The official AWS Knowledge Base retrieval server using Bedrock Agent Runtime.