Show HN: We ran 79 MCP servers in microVMs, only 31 passed

Taimoor here, one of two founders. We've run 79 of the most-used MCP servers so far, only 31 came back fit. The one that got me: Heroku's own official MCP server comes back not fit, high severity, it can run arbitrary commands built from tool args. Record's public: usethrone.dev/server/heroku-mcp-server Honest about where it's at: right now it's protocol replay + static rules, the deeper syscall-level tracing is still being built. Free, no signup, throw any server at it.

Curious what'd make you actually put this in CI before your agents run something?