@kryptosai/mcp-observatory 0.27.0 → 0.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (123) hide show
  1. package/COMMERCIAL.md +6 -1
  2. package/CONTRIBUTORS.md +39 -0
  3. package/README.md +57 -18
  4. package/dist/src/adapters/http.js +1 -5
  5. package/dist/src/adapters/http.js.map +1 -1
  6. package/dist/src/cassette.js +3 -2
  7. package/dist/src/cassette.js.map +1 -1
  8. package/dist/src/checks/attack-sim.d.ts +18 -0
  9. package/dist/src/checks/attack-sim.js +304 -0
  10. package/dist/src/checks/attack-sim.js.map +1 -0
  11. package/dist/src/ci-issue.js +4 -3
  12. package/dist/src/ci-issue.js.map +1 -1
  13. package/dist/src/cli.js +17 -3
  14. package/dist/src/cli.js.map +1 -1
  15. package/dist/src/commands/attack-sim.d.ts +2 -0
  16. package/dist/src/commands/attack-sim.js +168 -0
  17. package/dist/src/commands/attack-sim.js.map +1 -0
  18. package/dist/src/commands/init-ci.d.ts +1 -0
  19. package/dist/src/commands/init-ci.js +8 -3
  20. package/dist/src/commands/init-ci.js.map +1 -1
  21. package/dist/src/commands/legacy.js +6 -1
  22. package/dist/src/commands/legacy.js.map +1 -1
  23. package/dist/src/commands/scan.js +7 -1
  24. package/dist/src/commands/scan.js.map +1 -1
  25. package/dist/src/commands/serve.js +9 -1
  26. package/dist/src/commands/serve.js.map +1 -1
  27. package/dist/src/commands/setup-ci-conversion.d.ts +1 -0
  28. package/dist/src/commands/setup-ci-conversion.js +1 -0
  29. package/dist/src/commands/setup-ci-conversion.js.map +1 -1
  30. package/dist/src/commands/telemetry.js +20 -14
  31. package/dist/src/commands/telemetry.js.map +1 -1
  32. package/dist/src/commands/test.js +13 -1
  33. package/dist/src/commands/test.js.map +1 -1
  34. package/dist/src/findings.js +41 -1
  35. package/dist/src/findings.js.map +1 -1
  36. package/dist/src/history.js +3 -2
  37. package/dist/src/history.js.map +1 -1
  38. package/dist/src/index.d.ts +2 -0
  39. package/dist/src/index.js +2 -0
  40. package/dist/src/index.js.map +1 -1
  41. package/dist/src/integrations/smithery.js +5 -1
  42. package/dist/src/integrations/smithery.js.map +1 -1
  43. package/dist/src/reporters/attack-sim.d.ts +2 -0
  44. package/dist/src/reporters/attack-sim.js +84 -0
  45. package/dist/src/reporters/attack-sim.js.map +1 -0
  46. package/dist/src/reporters/pr-comment.js +20 -6
  47. package/dist/src/reporters/pr-comment.js.map +1 -1
  48. package/dist/src/runner.d.ts +3 -0
  49. package/dist/src/runner.js +5 -0
  50. package/dist/src/runner.js.map +1 -1
  51. package/dist/src/score.js +1 -1
  52. package/dist/src/score.js.map +1 -1
  53. package/dist/src/storage.js +3 -2
  54. package/dist/src/storage.js.map +1 -1
  55. package/dist/src/telemetry.d.ts +3 -0
  56. package/dist/src/telemetry.js +17 -1
  57. package/dist/src/telemetry.js.map +1 -1
  58. package/dist/src/types.d.ts +1 -1
  59. package/dist/src/utils/files.d.ts +1 -0
  60. package/dist/src/utils/files.js +21 -0
  61. package/dist/src/utils/files.js.map +1 -0
  62. package/dist/src/utils/ids.js +18 -5
  63. package/dist/src/utils/ids.js.map +1 -1
  64. package/dist/src/utils/url.d.ts +2 -0
  65. package/dist/src/utils/url.js +15 -0
  66. package/dist/src/utils/url.js.map +1 -0
  67. package/dist/src/validate.js +1 -1
  68. package/dist/src/validate.js.map +1 -1
  69. package/docs/agent-ecosystem-promotion-plan.md +244 -0
  70. package/docs/agent-tasks.md +95 -0
  71. package/docs/automatic-ci-integration.md +33 -0
  72. package/docs/campaign-attribution.md +58 -0
  73. package/docs/code-scanning-demo.md +57 -0
  74. package/docs/contributor-proof-cards/README.md +33 -0
  75. package/docs/contributor-recognition.md +92 -0
  76. package/docs/feishu-lark-mcp.md +1 -1
  77. package/docs/github-code-scanning-for-mcp.md +1 -1
  78. package/docs/launch.md +64 -0
  79. package/docs/mcp-attack-simulator.md +57 -0
  80. package/docs/mcp-server-safety-index.md +18 -12
  81. package/docs/proof.md +5 -2
  82. package/docs/receipt-graph.md +54 -0
  83. package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
  84. package/docs/safety-index/artifacts/antv-chart-server.md +10 -10
  85. package/docs/safety-index/artifacts/browsermcp-server.json +17 -17
  86. package/docs/safety-index/artifacts/browsermcp-server.md +10 -10
  87. package/docs/safety-index/artifacts/context7-server.json +17 -17
  88. package/docs/safety-index/artifacts/context7-server.md +10 -10
  89. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +2014 -0
  90. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +163 -0
  91. package/docs/safety-index/artifacts/everything-server.json +131 -56
  92. package/docs/safety-index/artifacts/everything-server.md +24 -24
  93. package/docs/safety-index/artifacts/executeautomation-playwright-server.json +26 -18
  94. package/docs/safety-index/artifacts/executeautomation-playwright-server.md +10 -10
  95. package/docs/safety-index/artifacts/filesystem-server.json +128 -20
  96. package/docs/safety-index/artifacts/filesystem-server.md +10 -10
  97. package/docs/safety-index/artifacts/kubernetes-server.attack.json +1559 -0
  98. package/docs/safety-index/artifacts/kubernetes-server.attack.md +43 -0
  99. package/docs/safety-index/artifacts/kubernetes-server.attack.sarif +2857 -0
  100. package/docs/safety-index/artifacts/kubernetes-server.json +1348 -0
  101. package/docs/safety-index/artifacts/kubernetes-server.md +150 -0
  102. package/docs/safety-index/artifacts/memory-server.json +75 -32
  103. package/docs/safety-index/artifacts/memory-server.md +35 -28
  104. package/docs/safety-index/artifacts/opentofu-server.json +25 -17
  105. package/docs/safety-index/artifacts/opentofu-server.md +11 -11
  106. package/docs/safety-index/artifacts/playwright-mcp-server.json +56 -20
  107. package/docs/safety-index/artifacts/playwright-mcp-server.md +12 -12
  108. package/docs/safety-index/artifacts/promptopia-server.json +28 -20
  109. package/docs/safety-index/artifacts/promptopia-server.md +11 -11
  110. package/docs/safety-index/artifacts/puppeteer-server.json +42 -30
  111. package/docs/safety-index/artifacts/puppeteer-server.md +28 -28
  112. package/docs/safety-index/artifacts/ref-tools-server.json +17 -17
  113. package/docs/safety-index/artifacts/ref-tools-server.md +9 -9
  114. package/docs/safety-index/artifacts/sequential-thinking-server.json +20 -21
  115. package/docs/safety-index/artifacts/sequential-thinking-server.md +10 -10
  116. package/docs/safety-index/targets.json +90 -14
  117. package/docs/setup-ci-doctor.md +2 -0
  118. package/docs/target-gallery.md +49 -0
  119. package/docs/target-registry.md +5 -1
  120. package/docs/tool-call-receipts.md +116 -0
  121. package/package.json +20 -2
  122. package/schemas/run-artifact.schema.json +1 -0
  123. package/scripts/postinstall.mjs +123 -0
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "pass",
5
- "runId": "run_2026-06-24T020724758Z_bed6c073",
6
- "createdAt": "2026-06-24T02:07:24.758Z",
7
- "toolVersion": "0.24.0",
5
+ "runId": "run_2026-07-06T014654306Z_160413b5",
6
+ "createdAt": "2026-07-06T01:46:54.306Z",
7
+ "toolVersion": "0.26.1",
8
8
  "target": {
9
9
  "targetId": "context7-server",
10
10
  "adapter": "local-process",
@@ -25,8 +25,8 @@
25
25
  "serverVersion": "3.2.2"
26
26
  },
27
27
  "environment": {
28
- "platform": "darwin 25.5.0",
29
- "nodeVersion": "v22.22.1"
28
+ "platform": "darwin 24.0.0",
29
+ "nodeVersion": "v25.8.1"
30
30
  },
31
31
  "summary": {
32
32
  "total": 7,
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 1.5927080000001297,
46
+ "durationMs": 1.7208330000003116,
47
47
  "message": "Advertised capability responded with the minimal expected shape (2 items).",
48
48
  "evidence": [
49
49
  {
@@ -104,7 +104,7 @@
104
104
  "id": "prompts",
105
105
  "capability": "prompts",
106
106
  "status": "pass",
107
- "durationMs": 0.2917909999996482,
107
+ "durationMs": 0.2972090000002936,
108
108
  "message": "Advertised capability responded with the minimal expected shape (0 items).",
109
109
  "evidence": [
110
110
  {
@@ -124,7 +124,7 @@
124
124
  "id": "resources",
125
125
  "capability": "resources",
126
126
  "status": "pass",
127
- "durationMs": 0.5327499999993961,
127
+ "durationMs": 0.4392909999996846,
128
128
  "message": "Advertised capability responded with the minimal expected shape (0 items).",
129
129
  "evidence": [
130
130
  {
@@ -155,7 +155,7 @@
155
155
  "id": "security-lite",
156
156
  "capability": "security-lite",
157
157
  "status": "pass",
158
- "durationMs": 0.024166000000150234,
158
+ "durationMs": 0.023624999999810825,
159
159
  "message": "No security issues detected (lightweight scan).",
160
160
  "evidence": [
161
161
  {
@@ -171,7 +171,7 @@
171
171
  "id": "conformance",
172
172
  "capability": "conformance",
173
173
  "status": "pass",
174
- "durationMs": 1.0839169999999285,
174
+ "durationMs": 0.7742079999998168,
175
175
  "message": "All 7 conformance checks passed.",
176
176
  "evidence": [
177
177
  {
@@ -197,7 +197,7 @@
197
197
  "id": "schema-quality",
198
198
  "capability": "schema-quality",
199
199
  "status": "pass",
200
- "durationMs": 0.6274169999996957,
200
+ "durationMs": 0.6652500000000146,
201
201
  "message": "All 2 item(s) have good schema quality.",
202
202
  "evidence": [
203
203
  {
@@ -214,7 +214,7 @@
214
214
  "id": "security",
215
215
  "capability": "security",
216
216
  "status": "pass",
217
- "durationMs": 0.2532499999997526,
217
+ "durationMs": 0.29783299999962765,
218
218
  "message": "No security issues detected.",
219
219
  "evidence": [
220
220
  {
@@ -271,16 +271,16 @@
271
271
  "weight": 0.1,
272
272
  "score": 100,
273
273
  "details": [
274
- "Connect: 928ms",
274
+ "Connect: 817ms",
275
275
  "p95 latency: 2ms (3 operations)"
276
276
  ]
277
277
  }
278
278
  ]
279
279
  },
280
280
  "performanceMetrics": {
281
- "connectMs": 927.7457919999997,
282
- "toolsListMs": 1.5927080000001297,
283
- "promptsListMs": 0.2917909999996482,
284
- "resourcesListMs": 0.5327499999993961
281
+ "connectMs": 817.0577499999995,
282
+ "toolsListMs": 1.7208330000003116,
283
+ "promptsListMs": 0.2972090000002936,
284
+ "resourcesListMs": 0.4392909999996846
285
285
  }
286
286
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-06-24T02:07:24.758Z
3
+ Generated at 2026-07-06T01:46:54.306Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:24.758Z
8
8
  - Adapter: `local-process`
9
9
  - Command: `npx -y @upstash/context7-mcp`
10
10
  - Server: `Context7 3.2.2`
11
- - Platform: `darwin 25.5.0`
12
- - Node: `v22.22.1`
11
+ - Platform: `darwin 24.0.0`
12
+ - Node: `v25.8.1`
13
13
 
14
14
  ## Executive Summary
15
15
 
@@ -47,13 +47,13 @@ _Use the `diff` command against another run artifact to classify regressions and
47
47
 
48
48
  | Focus | Check | Status | Duration (ms) | Message |
49
49
  | --- | --- | --- | --- | --- |
50
- | healthy | conformance | pass | 1.08 | All 7 conformance checks passed. |
51
- | healthy | prompts | pass | 0.29 | Advertised capability responded with the minimal expected shape (0 items). |
52
- | healthy | resources | pass | 0.53 | Advertised capability responded with the minimal expected shape (0 items). |
53
- | healthy | schema-quality | pass | 0.63 | All 2 item(s) have good schema quality. |
54
- | healthy | security | pass | 0.25 | No security issues detected. |
50
+ | healthy | conformance | pass | 0.77 | All 7 conformance checks passed. |
51
+ | healthy | prompts | pass | 0.30 | Advertised capability responded with the minimal expected shape (0 items). |
52
+ | healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape (0 items). |
53
+ | healthy | schema-quality | pass | 0.67 | All 2 item(s) have good schema quality. |
54
+ | healthy | security | pass | 0.30 | No security issues detected. |
55
55
  | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
56
- | healthy | tools | pass | 1.59 | Advertised capability responded with the minimal expected shape (2 items). |
56
+ | healthy | tools | pass | 1.72 | Advertised capability responded with the minimal expected shape (2 items). |
57
57
 
58
58
  ## Evidence Snippets
59
59
 
@@ -159,5 +159,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
159
159
 
160
160
  - Artifact type: `run`
161
161
  - Schema version: `1.0.0`
162
- - Run ID: `run_2026-06-24T020724758Z_bed6c073`
162
+ - Run ID: `run_2026-07-06T014654306Z_160413b5`
163
163
  - Gate: `pass`