@kryptosai/mcp-observatory 0.26.1 → 0.28.0

package/docs/safety-index/artifacts/puppeteer-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:30.285Z
+Generated at 2026-07-06T01:47:01.216Z
 
 ## Target and Environment Metadata
 
@@ -8,16 +8,16 @@ Generated at 2026-06-24T02:07:30.285Z
 - Adapter: `local-process`
 - Command: `npx -y puppeteer-mcp-server`
 - Server: `example-servers/puppeteer 0.1.0`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
-**Health Score: 77/100 (C)**
+**Health Score: 89/100 (B)**
 
 | Dimension | Score | Weight |
 | --- | --- | --- |
-| Protocol Compliance | 60/100 | 30% |
+| Protocol Compliance | 100/100 | 30% |
 | Schema Quality | 60/100 | 20% |
 | Security | 100/100 | 20% |
 | Reliability | 83/100 | 20% |
@@ -25,18 +25,18 @@ Generated at 2026-06-24T02:07:30.285Z
 
 | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| pass | 7 | 4 | 0 | 2 | 1 | 0 | 0 |
+| pass | 7 | 5 | 0 | 1 | 1 | 0 | 0 |
 
 ## At a Glance
 
 - Safety verdict: **Needs review** — The server is usable, but caveated checks should be reviewed before agents depend on it.
-- Top risks: conformance: 6/7 conformance checks passed, 1 failed.; schema-quality: Found 2 quality finding(s) across 9 item(s): 1 warnings, 1 info.
+- Top risks: schema-quality: Found 2 quality finding(s) across 9 item(s): 1 warnings, 1 info.
 - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
 - Failing checks: none
-- Partial or flaky checks: conformance, schema-quality
+- Partial or flaky checks: schema-quality
 - Skipped checks: none
 - Unsupported checks: prompts
-- Suggested next step: Review the caveated checks next: conformance, schema-quality.
+- Suggested next step: Review the caveated checks next: schema-quality.
 - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
 
 ## Regressions and Recoveries
@@ -47,16 +47,28 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | resources | pass | 0.86 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
-| healthy | security | pass | 0.18 | No security issues detected. |
-| healthy | security-lite | pass | 0.04 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 0.41 | Advertised capability responded with the minimal expected shape (8 items). |
-| review | conformance | partial | 2.42 | 6/7 conformance checks passed, 1 failed. |
-| review | schema-quality | partial | 0.33 | Found 2 quality finding(s) across 9 item(s): 1 warnings, 1 info. |
+| healthy | conformance | pass | 571.27 | All 7 conformance checks passed. |
+| healthy | resources | pass | 0.53 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
+| healthy | security | pass | 0.22 | No security issues detected. |
+| healthy | security-lite | pass | 0.05 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 0.57 | Advertised capability responded with the minimal expected shape (8 items). |
+| review | schema-quality | partial | 0.50 | Found 2 quality finding(s) across 9 item(s): 1 warnings, 1 info. |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 
 ## Evidence Snippets
 
+### conformance — pass
+
+Summary: All 7 conformance checks passed.
+
+- Endpoint: `conformance/check`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `7`
+  - Identifiers: none
+  - Diagnostics: [pass] capabilities-present: Server returned capabilities object., [pass] server-info: Server provided initialization info., [pass] tools-capability-match: tools/list returned 8 tool(s). (+4 more)
+
 ### resources — pass
 
 Summary: Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported.
@@ -112,18 +124,6 @@ Summary: Advertised capability responded with the minimal expected shape (8 item
   - Identifiers: puppeteer_connect_active_tab, puppeteer_navigate, puppeteer_screenshot, puppeteer_click, puppeteer_fill (+3 more)
   - Diagnostics: none
 
-### conformance — partial
-
-Summary: 6/7 conformance checks passed, 1 failed.
-
-- Endpoint: `conformance/check`
-  - Advertised: `true`
-  - Responded: `true`
-  - Minimal shape present: `false`
-  - Item count: `7`
-  - Identifiers: tool-response-content
-  - Diagnostics: [pass] capabilities-present: Server returned capabilities object., [pass] server-info: Server provided initialization info., [pass] tools-capability-match: tools/list returned 8 tool(s). (+4 more)
-
 ### schema-quality — partial
 
 Summary: Found 2 quality finding(s) across 9 item(s): 1 warnings, 1 info.
@@ -159,5 +159,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020730285Z_85ad0698`
+- Run ID: `run_2026-07-06T014701216Z_1c0434b0`
 - Gate: `pass`

package/docs/safety-index/artifacts/ref-tools-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-06-24T020728542Z_cc57c712",
-  "createdAt": "2026-06-24T02:07:28.542Z",
-  "toolVersion": "0.24.0",
+  "runId": "run_2026-07-06T014658081Z_d215bf43",
+  "createdAt": "2026-07-06T01:46:58.081Z",
+  "toolVersion": "0.26.1",
   "target": {
     "targetId": "ref-tools-server",
     "adapter": "local-process",
@@ -25,8 +25,8 @@
     "serverVersion": "3.0.3"
   },
   "environment": {
-    "platform": "darwin 25.5.0",
-    "nodeVersion": "v22.22.1"
+    "platform": "darwin 24.0.0",
+    "nodeVersion": "v25.8.1"
   },
   "summary": {
     "total": 7,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 0.9550839999992604,
+      "durationMs": 0.7155000000002474,
       "message": "Advertised capability responded with the minimal expected shape (2 items).",
       "evidence": [
         {
@@ -92,7 +92,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "pass",
-      "durationMs": 0.21733400000084657,
+      "durationMs": 0.22549999999955617,
       "message": "Advertised capability responded with the minimal expected shape (2 items).",
       "evidence": [
         {
@@ -115,7 +115,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.002375000000029104,
+      "durationMs": 0.0021660000002157176,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -131,7 +131,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.017791999998735264,
+      "durationMs": 0.01762499999949796,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -147,7 +147,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 0.5875410000007832,
+      "durationMs": 0.5051670000002559,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -173,7 +173,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.4417920000014419,
+      "durationMs": 0.40233400000033726,
       "message": "All 4 item(s) have good schema quality.",
       "evidence": [
         {
@@ -190,7 +190,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.44887500000004366,
+      "durationMs": 0.16862500000024738,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -247,16 +247,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 775ms",
+          "Connect: 652ms",
           "p95 latency: 1ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 774.5396250000003,
-    "toolsListMs": 0.9550839999992604,
-    "promptsListMs": 0.21733400000084657,
-    "resourcesListMs": 0.002375000000029104
+    "connectMs": 652.1516670000001,
+    "toolsListMs": 0.7155000000002474,
+    "promptsListMs": 0.22549999999955617,
+    "resourcesListMs": 0.0021660000002157176
   }
 }

package/docs/safety-index/artifacts/ref-tools-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:28.542Z
+Generated at 2026-07-06T01:46:58.081Z
 
 ## Target and Environment Metadata
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:28.542Z
 - Adapter: `local-process`
 - Command: `npx -y ref-tools-mcp`
 - Server: `Ref 3.0.3`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
@@ -47,12 +47,12 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 0.59 | All 7 conformance checks passed. |
-| healthy | prompts | pass | 0.22 | Advertised capability responded with the minimal expected shape (2 items). |
-| healthy | schema-quality | pass | 0.44 | All 4 item(s) have good schema quality. |
-| healthy | security | pass | 0.45 | No security issues detected. |
+| healthy | conformance | pass | 0.51 | All 7 conformance checks passed. |
+| healthy | prompts | pass | 0.23 | Advertised capability responded with the minimal expected shape (2 items). |
+| healthy | schema-quality | pass | 0.40 | All 4 item(s) have good schema quality. |
+| healthy | security | pass | 0.17 | No security issues detected. |
 | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 0.96 | Advertised capability responded with the minimal expected shape (2 items). |
+| healthy | tools | pass | 0.72 | Advertised capability responded with the minimal expected shape (2 items). |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
 
 ## Evidence Snippets
@@ -152,5 +152,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020728542Z_cc57c712`
+- Run ID: `run_2026-07-06T014658081Z_d215bf43`
 - Gate: `pass`

package/docs/safety-index/artifacts/sequential-thinking-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-06-24T020722515Z_10f2e6a0",
-  "createdAt": "2026-06-24T02:07:22.515Z",
-  "toolVersion": "0.24.0",
+  "runId": "run_2026-07-06T014652165Z_55bd9c96",
+  "createdAt": "2026-07-06T01:46:52.165Z",
+  "toolVersion": "0.26.1",
   "target": {
     "targetId": "sequential-thinking-server",
     "adapter": "local-process",
@@ -25,8 +25,8 @@
     "serverVersion": "0.2.0"
   },
   "environment": {
-    "platform": "darwin 25.5.0",
-    "nodeVersion": "v22.22.1"
+    "platform": "darwin 24.0.0",
+    "nodeVersion": "v25.8.1"
   },
   "summary": {
     "total": 7,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 4.4761249999996835,
+      "durationMs": 3.0525840000000244,
       "message": "Advertised capability responded with the minimal expected shape (1 item).",
       "evidence": [
         {
@@ -67,8 +67,8 @@
                   "description": "Your current thinking step"
                 },
                 "nextThoughtNeeded": {
-                  "type": "boolean",
-                  "description": "Whether another thought step is needed"
+                  "description": "Whether another thought step is needed",
+                  "type": "boolean"
                 },
                 "thoughtNumber": {
                   "type": "integer",
@@ -109,7 +109,6 @@
               },
               "required": [
                 "thought",
-                "nextThoughtNeeded",
                 "thoughtNumber",
                 "totalThoughts"
               ],
@@ -123,7 +122,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.005541999999877589,
+      "durationMs": 0.003916000000117492,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -139,7 +138,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.0015410000000883883,
+      "durationMs": 0.0017090000001189765,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -155,7 +154,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.1121250000001055,
+      "durationMs": 0.03904199999988123,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -171,7 +170,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 2.253124999999727,
+      "durationMs": 1.9475420000001122,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -197,7 +196,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.8925840000001699,
+      "durationMs": 0.9627080000000205,
       "message": "All 1 item(s) have good schema quality.",
       "evidence": [
         {
@@ -214,7 +213,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 1.133458000000246,
+      "durationMs": 1,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -271,16 +270,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 722ms",
-          "p95 latency: 4ms (3 operations)"
+          "Connect: 671ms",
+          "p95 latency: 3ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 722.4729170000003,
-    "toolsListMs": 4.4761249999996835,
-    "promptsListMs": 0.005541999999877589,
-    "resourcesListMs": 0.0015410000000883883
+    "connectMs": 670.6410000000001,
+    "toolsListMs": 3.0525840000000244,
+    "promptsListMs": 0.003916000000117492,
+    "resourcesListMs": 0.0017090000001189765
   }
 }

package/docs/safety-index/artifacts/sequential-thinking-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:22.515Z
+Generated at 2026-07-06T01:46:52.165Z
 
 ## Target and Environment Metadata
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:22.515Z
 - Adapter: `local-process`
 - Command: `npx -y @modelcontextprotocol/server-sequential-thinking`
 - Server: `sequential-thinking-server 0.2.0`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
@@ -47,12 +47,12 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 2.25 | All 7 conformance checks passed. |
-| healthy | schema-quality | pass | 0.89 | All 1 item(s) have good schema quality. |
-| healthy | security | pass | 1.13 | No security issues detected. |
-| healthy | security-lite | pass | 0.11 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 4.48 | Advertised capability responded with the minimal expected shape (1 item). |
-| confirm intent | prompts | unsupported | 0.01 | Prompts are not advertised by the target. |
+| healthy | conformance | pass | 1.95 | All 7 conformance checks passed. |
+| healthy | schema-quality | pass | 0.96 | All 1 item(s) have good schema quality. |
+| healthy | security | pass | 1.00 | No security issues detected. |
+| healthy | security-lite | pass | 0.04 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 3.05 | Advertised capability responded with the minimal expected shape (1 item). |
+| confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
 
 ## Evidence Snippets
@@ -152,5 +152,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020722515Z_10f2e6a0`
+- Run ID: `run_2026-07-06T014652165Z_55bd9c96`
 - Gate: `pass`

package/docs/safety-index/targets.json

@@ -6,7 +6,10 @@
     "packageName": "@modelcontextprotocol/server-everything",
     "category": "Reference",
     "command": "npx",
-    "args": ["-y", "@modelcontextprotocol/server-everything"],
+    "args": [
+      "-y",
+      "@modelcontextprotocol/server-everything"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Reference compatibility",
     "failureClass": "Broad protocol surface",
@@ -21,7 +24,10 @@
     "packageName": "@modelcontextprotocol/server-sequential-thinking",
     "category": "Reference",
     "command": "npx",
-    "args": ["-y", "@modelcontextprotocol/server-sequential-thinking"],
+    "args": [
+      "-y",
+      "@modelcontextprotocol/server-sequential-thinking"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Reference compatibility",
     "failureClass": "Tool schema clarity",
@@ -35,7 +41,10 @@
     "packageName": "@modelcontextprotocol/server-memory",
     "category": "Reference / Memory",
     "command": "npx",
-    "args": ["-y", "@modelcontextprotocol/server-memory"],
+    "args": [
+      "-y",
+      "@modelcontextprotocol/server-memory"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Agent memory mutation",
     "failureClass": "Persistent state tools",
@@ -49,7 +58,11 @@
     "packageName": "@modelcontextprotocol/server-filesystem",
     "category": "Filesystem",
     "command": "npx",
-    "args": ["-y", "@modelcontextprotocol/server-filesystem", "examples/filesystem-fixture"],
+    "args": [
+      "-y",
+      "@modelcontextprotocol/server-filesystem",
+      "examples/filesystem-fixture"
+    ],
     "timeoutMs": 30000,
     "riskClass": "Filesystem boundary",
     "failureClass": "Sandboxed filesystem access",
@@ -63,7 +76,10 @@
     "packageName": "@upstash/context7-mcp",
     "category": "Documentation / Search",
     "command": "npx",
-    "args": ["-y", "@upstash/context7-mcp"],
+    "args": [
+      "-y",
+      "@upstash/context7-mcp"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Untrusted content retrieval",
     "failureClass": "Prompt-injection-sensitive retrieval",
@@ -77,7 +93,10 @@
     "packageName": "promptopia-mcp",
     "category": "Prompts",
     "command": "npx",
-    "args": ["-y", "promptopia-mcp"],
+    "args": [
+      "-y",
+      "promptopia-mcp"
+    ],
     "env": {
       "PROMPTS_DIR": "examples/promptopia-prompts"
     },
@@ -94,13 +113,33 @@
     "packageName": "ref-tools-mcp",
     "category": "Developer Tools",
     "command": "npx",
-    "args": ["-y", "ref-tools-mcp"],
+    "args": [
+      "-y",
+      "ref-tools-mcp"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Developer reference tooling",
     "failureClass": "Prompt/tool inventory",
     "whyItMatters": "Developer tools become agent dependencies when wired into coding workflows.",
     "reproductionNotes": "Zero-config public package."
   },
+  {
+    "id": "cyanheads-git-mcp-server",
+    "name": "Git MCP Server",
+    "repo": "https://www.npmjs.com/package/@cyanheads/git-mcp-server",
+    "packageName": "@cyanheads/git-mcp-server",
+    "category": "Developer Tools",
+    "command": "npx",
+    "args": [
+      "-y",
+      "@cyanheads/git-mcp-server"
+    ],
+    "timeoutMs": 60000,
+    "riskClass": "Repository mutation",
+    "failureClass": "Git tool boundary",
+    "whyItMatters": "Coding agents often need Git context and can cause real repository changes if tool boundaries are unclear.",
+    "reproductionNotes": "Zero-config public package. Keep tool invocation read-only unless a harmless fixture repository is added."
+  },
   {
     "id": "opentofu-server",
     "name": "OpenTofu MCP server",
@@ -108,7 +147,10 @@
     "packageName": "@opentofu/opentofu-mcp-server",
     "category": "Infrastructure",
     "command": "npx",
-    "args": ["-y", "@opentofu/opentofu-mcp-server"],
+    "args": [
+      "-y",
+      "@opentofu/opentofu-mcp-server"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Infrastructure-as-code",
     "failureClass": "Infrastructure tool surface",
@@ -122,9 +164,14 @@
     "packageName": "puppeteer-mcp-server",
     "category": "Browser Automation",
     "command": "npx",
-    "args": ["-y", "puppeteer-mcp-server"],
+    "args": [
+      "-y",
+      "puppeteer-mcp-server"
+    ],
     "timeoutMs": 60000,
-    "securitySuppressions": ["puppeteer_evaluate:shell-injection"],
+    "securitySuppressions": [
+      "puppeteer_evaluate:shell-injection"
+    ],
     "riskClass": "Browser control",
     "failureClass": "Browser/code execution boundary",
     "whyItMatters": "Browser automation gives agents navigation, page state, and sometimes code-evaluation powers.",
@@ -137,7 +184,10 @@
     "packageName": "@browsermcp/mcp",
     "category": "Browser Automation",
     "command": "npx",
-    "args": ["-y", "@browsermcp/mcp"],
+    "args": [
+      "-y",
+      "@browsermcp/mcp"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Browser control",
     "failureClass": "Browser-control boundary",
@@ -152,7 +202,10 @@
     "packageName": "@playwright/mcp",
     "category": "Browser Automation",
     "command": "npx",
-    "args": ["-y", "@playwright/mcp"],
+    "args": [
+      "-y",
+      "@playwright/mcp"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Browser control",
     "failureClass": "Browser/code execution boundary",
@@ -166,7 +219,10 @@
     "packageName": "@antv/mcp-server-chart",
     "category": "Visualization",
     "command": "npx",
-    "args": ["-y", "@antv/mcp-server-chart"],
+    "args": [
+      "-y",
+      "@antv/mcp-server-chart"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Generated artifacts",
     "failureClass": "Artifact-producing tools",
@@ -181,12 +237,32 @@
     "packageName": "@executeautomation/playwright-mcp-server",
     "category": "Browser Automation",
     "command": "npx",
-    "args": ["-y", "@executeautomation/playwright-mcp-server"],
+    "args": [
+      "-y",
+      "@executeautomation/playwright-mcp-server"
+    ],
     "timeoutMs": 60000,
     "riskClass": "Browser control",
     "failureClass": "Startup/listing reproducibility",
     "whyItMatters": "A public browser automation package that fails basic listing checks shows why reproducible readiness evidence matters.",
     "reproductionNotes": "Evaluated as a public package; current result should be treated as a maintainer conversation starter.",
     "publicProof": "https://github.com/executeautomation/mcp-playwright/pull/225"
+  },
+  {
+    "id": "kubernetes-server",
+    "name": "Flux159 Kubernetes MCP server",
+    "repo": "https://github.com/Flux159/mcp-server-kubernetes",
+    "packageName": "mcp-server-kubernetes",
+    "category": "Infrastructure / Kubernetes",
+    "command": "npx",
+    "args": [
+      "-y",
+      "mcp-server-kubernetes"
+    ],
+    "timeoutMs": 60000,
+    "riskClass": "Kubernetes control plane",
+    "failureClass": "Command and cluster mutation boundary",
+    "whyItMatters": "Kubernetes MCP servers can expose cluster mutation, pod exec, manifest apply/delete, and broad kubectl command surfaces to agents.",
+    "reproductionNotes": "Zero-config public package. Evaluated without cluster credentials; findings are metadata and schema boundary prompts, not exploit claims."
   }
 ]

package/docs/setup-ci-doctor.md

@@ -6,6 +6,8 @@
 npx @kryptosai/mcp-observatory setup-ci --doctor
 ```
 
+MCP server packages can also opt into install-time workflow creation by setting `mcpObservatory.autoSetupCi` in `package.json`. See [Automatic CI Integration](./automatic-ci-integration.md).
+
 It checks:
 
 - the GitHub Action workflow exists