MCP Integration in Claude Code
Last reviewed
Correct answer: C. That it met listing criteria on review, not that its code has been audited for security.
Explanation
The principle — A listing tells you that something passed the check that was actually performed, which is rarely the check you were hoping for.
Why the key is correct — Anthropic reviews connectors against its listing criteria before adding them to the Directory, but does not security-audit or manage any MCP server. The instruction to the user is unchanged: verify you trust each server before connecting it.
Why the others are wrong — No code audit is implied. The trust decision remains yours, because only you know what is at stake. And Anthropic lists these servers rather than operating them.
Remember this — Listed means reviewed for listing, not audited for safety.
Sources — Anthropic's Claude Code security page and MCP reference.
Sources
“Anthropic reviews connectors against its listing criteria before adding them to the Anthropic Directory, but does not security-audit or manage any MCP server.”
“Verify you trust each server before connecting it.”
Practise 10 questions on this topic
Take MCP Integration in Claude Code — Timed Test 1 (10 questions) — scored instantly, explanation for every question, no login.