---
schema_version: "1"
id: a34f22c4a2afe7f7d266abb0893ad85a605e863dc9639385a6cd4148c331d59c
title: Assess Security Risk Scores for Third-Party MCP Servers
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_agentforce_aegis_risk_score.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_agentforce_aegis_risk_score.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ac4c7f92d65b181a641c76557b612143a3eac8d2860f96d115aca4e4b13e7987
description: Check the risk score of third-party Model Context Protocol (MCP) servers during registration. Agentforce Registry conducts an automatic security scan that returns a Low, Medium, or High risk score. Use the risk score as a risk indicator of MCP servers.
products:
  - Cross Cloud
release: "262"
---
# Assess Security Risk Scores for Third-Party MCP Servers

Check the risk score of third-party Model Context Protocol (MCP) servers during registration. Agentforce Registry conducts an automatic security scan that returns a Low, Medium, or High risk score. Use the risk score as a risk indicator of MCP servers.

**Where:** This change applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions with Foundations or Agentforce 1 editions.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-262-0-0-production-enus/e945111b-3e0a-4011-accc-d5949363bfcc/images/icon_note.png)

Note : Security risk scoring for third-party MCP servers is generally available in English.

**When:** Security risk scoring for third-party MCP servers is available on a rolling basis starting the week of July 13, 2026.

**Why:** A compromised tool description redirects agent behavior without any visible sign to the admin using it—a type of attack called tool poisoning. A Medium risk score indicates a perceived risk. A High risk score indicates a detected risk.

**How:** In Setup, go to Agentforce Registry and select **Register MCP Server**. Complete the connection details. When you reach the MCP Server Allowlist step, the registry shows an overall risk score and a score for each tool.

#### See Also

- [_Salesforce Help_: MCP Risk Score](https://help.salesforce.com/s/articleView?id=ai.agent_mcp_registration_manage_risk_score.htm&language=en_US)