@kryptosai/mcp-observatory 0.27.0 → 0.28.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/COMMERCIAL.md +6 -1
- package/CONTRIBUTORS.md +39 -0
- package/README.md +57 -18
- package/dist/src/adapters/http.js +1 -5
- package/dist/src/adapters/http.js.map +1 -1
- package/dist/src/cassette.js +3 -2
- package/dist/src/cassette.js.map +1 -1
- package/dist/src/checks/attack-sim.d.ts +18 -0
- package/dist/src/checks/attack-sim.js +304 -0
- package/dist/src/checks/attack-sim.js.map +1 -0
- package/dist/src/ci-issue.js +4 -3
- package/dist/src/ci-issue.js.map +1 -1
- package/dist/src/cli.js +17 -3
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/attack-sim.d.ts +2 -0
- package/dist/src/commands/attack-sim.js +168 -0
- package/dist/src/commands/attack-sim.js.map +1 -0
- package/dist/src/commands/init-ci.d.ts +1 -0
- package/dist/src/commands/init-ci.js +8 -3
- package/dist/src/commands/init-ci.js.map +1 -1
- package/dist/src/commands/legacy.js +6 -1
- package/dist/src/commands/legacy.js.map +1 -1
- package/dist/src/commands/scan.js +7 -1
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/serve.js +9 -1
- package/dist/src/commands/serve.js.map +1 -1
- package/dist/src/commands/setup-ci-conversion.d.ts +1 -0
- package/dist/src/commands/setup-ci-conversion.js +1 -0
- package/dist/src/commands/setup-ci-conversion.js.map +1 -1
- package/dist/src/commands/telemetry.js +20 -14
- package/dist/src/commands/telemetry.js.map +1 -1
- package/dist/src/commands/test.js +13 -1
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/findings.js +41 -1
- package/dist/src/findings.js.map +1 -1
- package/dist/src/history.js +3 -2
- package/dist/src/history.js.map +1 -1
- package/dist/src/index.d.ts +2 -0
- package/dist/src/index.js +2 -0
- package/dist/src/index.js.map +1 -1
- package/dist/src/integrations/smithery.js +5 -1
- package/dist/src/integrations/smithery.js.map +1 -1
- package/dist/src/reporters/attack-sim.d.ts +2 -0
- package/dist/src/reporters/attack-sim.js +84 -0
- package/dist/src/reporters/attack-sim.js.map +1 -0
- package/dist/src/reporters/pr-comment.js +20 -6
- package/dist/src/reporters/pr-comment.js.map +1 -1
- package/dist/src/runner.d.ts +3 -0
- package/dist/src/runner.js +5 -0
- package/dist/src/runner.js.map +1 -1
- package/dist/src/score.js +1 -1
- package/dist/src/score.js.map +1 -1
- package/dist/src/storage.js +3 -2
- package/dist/src/storage.js.map +1 -1
- package/dist/src/telemetry.d.ts +3 -0
- package/dist/src/telemetry.js +17 -1
- package/dist/src/telemetry.js.map +1 -1
- package/dist/src/types.d.ts +1 -1
- package/dist/src/utils/files.d.ts +1 -0
- package/dist/src/utils/files.js +21 -0
- package/dist/src/utils/files.js.map +1 -0
- package/dist/src/utils/ids.js +18 -5
- package/dist/src/utils/ids.js.map +1 -1
- package/dist/src/utils/url.d.ts +2 -0
- package/dist/src/utils/url.js +15 -0
- package/dist/src/utils/url.js.map +1 -0
- package/dist/src/validate.js +1 -1
- package/dist/src/validate.js.map +1 -1
- package/docs/agent-ecosystem-promotion-plan.md +244 -0
- package/docs/agent-tasks.md +95 -0
- package/docs/automatic-ci-integration.md +33 -0
- package/docs/campaign-attribution.md +58 -0
- package/docs/code-scanning-demo.md +57 -0
- package/docs/contributor-proof-cards/README.md +33 -0
- package/docs/contributor-recognition.md +92 -0
- package/docs/feishu-lark-mcp.md +1 -1
- package/docs/github-code-scanning-for-mcp.md +1 -1
- package/docs/launch.md +64 -0
- package/docs/mcp-attack-simulator.md +57 -0
- package/docs/mcp-server-safety-index.md +18 -12
- package/docs/proof.md +5 -2
- package/docs/receipt-graph.md +54 -0
- package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
- package/docs/safety-index/artifacts/antv-chart-server.md +10 -10
- package/docs/safety-index/artifacts/browsermcp-server.json +17 -17
- package/docs/safety-index/artifacts/browsermcp-server.md +10 -10
- package/docs/safety-index/artifacts/context7-server.json +17 -17
- package/docs/safety-index/artifacts/context7-server.md +10 -10
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +2014 -0
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +163 -0
- package/docs/safety-index/artifacts/everything-server.json +131 -56
- package/docs/safety-index/artifacts/everything-server.md +24 -24
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +26 -18
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +10 -10
- package/docs/safety-index/artifacts/filesystem-server.json +128 -20
- package/docs/safety-index/artifacts/filesystem-server.md +10 -10
- package/docs/safety-index/artifacts/kubernetes-server.attack.json +1559 -0
- package/docs/safety-index/artifacts/kubernetes-server.attack.md +43 -0
- package/docs/safety-index/artifacts/kubernetes-server.attack.sarif +2857 -0
- package/docs/safety-index/artifacts/kubernetes-server.json +1348 -0
- package/docs/safety-index/artifacts/kubernetes-server.md +150 -0
- package/docs/safety-index/artifacts/memory-server.json +75 -32
- package/docs/safety-index/artifacts/memory-server.md +35 -28
- package/docs/safety-index/artifacts/opentofu-server.json +25 -17
- package/docs/safety-index/artifacts/opentofu-server.md +11 -11
- package/docs/safety-index/artifacts/playwright-mcp-server.json +56 -20
- package/docs/safety-index/artifacts/playwright-mcp-server.md +12 -12
- package/docs/safety-index/artifacts/promptopia-server.json +28 -20
- package/docs/safety-index/artifacts/promptopia-server.md +11 -11
- package/docs/safety-index/artifacts/puppeteer-server.json +42 -30
- package/docs/safety-index/artifacts/puppeteer-server.md +28 -28
- package/docs/safety-index/artifacts/ref-tools-server.json +17 -17
- package/docs/safety-index/artifacts/ref-tools-server.md +9 -9
- package/docs/safety-index/artifacts/sequential-thinking-server.json +20 -21
- package/docs/safety-index/artifacts/sequential-thinking-server.md +10 -10
- package/docs/safety-index/targets.json +90 -14
- package/docs/setup-ci-doctor.md +2 -0
- package/docs/target-gallery.md +49 -0
- package/docs/target-registry.md +5 -1
- package/docs/tool-call-receipts.md +116 -0
- package/package.json +20 -2
- package/schemas/run-artifact.schema.json +1 -0
- package/scripts/postinstall.mjs +123 -0
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
"artifactType": "run",
|
|
3
3
|
"schemaVersion": "1.0.0",
|
|
4
4
|
"gate": "pass",
|
|
5
|
-
"runId": "run_2026-
|
|
6
|
-
"createdAt": "2026-
|
|
7
|
-
"toolVersion": "0.
|
|
5
|
+
"runId": "run_2026-07-06T014654306Z_160413b5",
|
|
6
|
+
"createdAt": "2026-07-06T01:46:54.306Z",
|
|
7
|
+
"toolVersion": "0.26.1",
|
|
8
8
|
"target": {
|
|
9
9
|
"targetId": "context7-server",
|
|
10
10
|
"adapter": "local-process",
|
|
@@ -25,8 +25,8 @@
|
|
|
25
25
|
"serverVersion": "3.2.2"
|
|
26
26
|
},
|
|
27
27
|
"environment": {
|
|
28
|
-
"platform": "darwin
|
|
29
|
-
"nodeVersion": "
|
|
28
|
+
"platform": "darwin 24.0.0",
|
|
29
|
+
"nodeVersion": "v25.8.1"
|
|
30
30
|
},
|
|
31
31
|
"summary": {
|
|
32
32
|
"total": 7,
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
"id": "tools",
|
|
44
44
|
"capability": "tools",
|
|
45
45
|
"status": "pass",
|
|
46
|
-
"durationMs": 1.
|
|
46
|
+
"durationMs": 1.7208330000003116,
|
|
47
47
|
"message": "Advertised capability responded with the minimal expected shape (2 items).",
|
|
48
48
|
"evidence": [
|
|
49
49
|
{
|
|
@@ -104,7 +104,7 @@
|
|
|
104
104
|
"id": "prompts",
|
|
105
105
|
"capability": "prompts",
|
|
106
106
|
"status": "pass",
|
|
107
|
-
"durationMs": 0.
|
|
107
|
+
"durationMs": 0.2972090000002936,
|
|
108
108
|
"message": "Advertised capability responded with the minimal expected shape (0 items).",
|
|
109
109
|
"evidence": [
|
|
110
110
|
{
|
|
@@ -124,7 +124,7 @@
|
|
|
124
124
|
"id": "resources",
|
|
125
125
|
"capability": "resources",
|
|
126
126
|
"status": "pass",
|
|
127
|
-
"durationMs": 0.
|
|
127
|
+
"durationMs": 0.4392909999996846,
|
|
128
128
|
"message": "Advertised capability responded with the minimal expected shape (0 items).",
|
|
129
129
|
"evidence": [
|
|
130
130
|
{
|
|
@@ -155,7 +155,7 @@
|
|
|
155
155
|
"id": "security-lite",
|
|
156
156
|
"capability": "security-lite",
|
|
157
157
|
"status": "pass",
|
|
158
|
-
"durationMs": 0.
|
|
158
|
+
"durationMs": 0.023624999999810825,
|
|
159
159
|
"message": "No security issues detected (lightweight scan).",
|
|
160
160
|
"evidence": [
|
|
161
161
|
{
|
|
@@ -171,7 +171,7 @@
|
|
|
171
171
|
"id": "conformance",
|
|
172
172
|
"capability": "conformance",
|
|
173
173
|
"status": "pass",
|
|
174
|
-
"durationMs":
|
|
174
|
+
"durationMs": 0.7742079999998168,
|
|
175
175
|
"message": "All 7 conformance checks passed.",
|
|
176
176
|
"evidence": [
|
|
177
177
|
{
|
|
@@ -197,7 +197,7 @@
|
|
|
197
197
|
"id": "schema-quality",
|
|
198
198
|
"capability": "schema-quality",
|
|
199
199
|
"status": "pass",
|
|
200
|
-
"durationMs": 0.
|
|
200
|
+
"durationMs": 0.6652500000000146,
|
|
201
201
|
"message": "All 2 item(s) have good schema quality.",
|
|
202
202
|
"evidence": [
|
|
203
203
|
{
|
|
@@ -214,7 +214,7 @@
|
|
|
214
214
|
"id": "security",
|
|
215
215
|
"capability": "security",
|
|
216
216
|
"status": "pass",
|
|
217
|
-
"durationMs": 0.
|
|
217
|
+
"durationMs": 0.29783299999962765,
|
|
218
218
|
"message": "No security issues detected.",
|
|
219
219
|
"evidence": [
|
|
220
220
|
{
|
|
@@ -271,16 +271,16 @@
|
|
|
271
271
|
"weight": 0.1,
|
|
272
272
|
"score": 100,
|
|
273
273
|
"details": [
|
|
274
|
-
"Connect:
|
|
274
|
+
"Connect: 817ms",
|
|
275
275
|
"p95 latency: 2ms (3 operations)"
|
|
276
276
|
]
|
|
277
277
|
}
|
|
278
278
|
]
|
|
279
279
|
},
|
|
280
280
|
"performanceMetrics": {
|
|
281
|
-
"connectMs":
|
|
282
|
-
"toolsListMs": 1.
|
|
283
|
-
"promptsListMs": 0.
|
|
284
|
-
"resourcesListMs": 0.
|
|
281
|
+
"connectMs": 817.0577499999995,
|
|
282
|
+
"toolsListMs": 1.7208330000003116,
|
|
283
|
+
"promptsListMs": 0.2972090000002936,
|
|
284
|
+
"resourcesListMs": 0.4392909999996846
|
|
285
285
|
}
|
|
286
286
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# MCP Observatory Run Report
|
|
2
2
|
|
|
3
|
-
Generated at 2026-
|
|
3
|
+
Generated at 2026-07-06T01:46:54.306Z
|
|
4
4
|
|
|
5
5
|
## Target and Environment Metadata
|
|
6
6
|
|
|
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:24.758Z
|
|
|
8
8
|
- Adapter: `local-process`
|
|
9
9
|
- Command: `npx -y @upstash/context7-mcp`
|
|
10
10
|
- Server: `Context7 3.2.2`
|
|
11
|
-
- Platform: `darwin
|
|
12
|
-
- Node: `
|
|
11
|
+
- Platform: `darwin 24.0.0`
|
|
12
|
+
- Node: `v25.8.1`
|
|
13
13
|
|
|
14
14
|
## Executive Summary
|
|
15
15
|
|
|
@@ -47,13 +47,13 @@ _Use the `diff` command against another run artifact to classify regressions and
|
|
|
47
47
|
|
|
48
48
|
| Focus | Check | Status | Duration (ms) | Message |
|
|
49
49
|
| --- | --- | --- | --- | --- |
|
|
50
|
-
| healthy | conformance | pass |
|
|
51
|
-
| healthy | prompts | pass | 0.
|
|
52
|
-
| healthy | resources | pass | 0.
|
|
53
|
-
| healthy | schema-quality | pass | 0.
|
|
54
|
-
| healthy | security | pass | 0.
|
|
50
|
+
| healthy | conformance | pass | 0.77 | All 7 conformance checks passed. |
|
|
51
|
+
| healthy | prompts | pass | 0.30 | Advertised capability responded with the minimal expected shape (0 items). |
|
|
52
|
+
| healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape (0 items). |
|
|
53
|
+
| healthy | schema-quality | pass | 0.67 | All 2 item(s) have good schema quality. |
|
|
54
|
+
| healthy | security | pass | 0.30 | No security issues detected. |
|
|
55
55
|
| healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
|
|
56
|
-
| healthy | tools | pass | 1.
|
|
56
|
+
| healthy | tools | pass | 1.72 | Advertised capability responded with the minimal expected shape (2 items). |
|
|
57
57
|
|
|
58
58
|
## Evidence Snippets
|
|
59
59
|
|
|
@@ -159,5 +159,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
|
159
159
|
|
|
160
160
|
- Artifact type: `run`
|
|
161
161
|
- Schema version: `1.0.0`
|
|
162
|
-
- Run ID: `run_2026-
|
|
162
|
+
- Run ID: `run_2026-07-06T014654306Z_160413b5`
|
|
163
163
|
- Gate: `pass`
|