@kryptosai/mcp-observatory 0.28.0 → 1.28.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (108) hide show
  1. package/COMMERCIAL.md +26 -5
  2. package/README.md +65 -12
  3. package/dist/src/action-receipt.d.ts +20 -0
  4. package/dist/src/action-receipt.js +85 -0
  5. package/dist/src/action-receipt.js.map +1 -0
  6. package/dist/src/audit.d.ts +64 -0
  7. package/dist/src/audit.js +359 -0
  8. package/dist/src/audit.js.map +1 -0
  9. package/dist/src/checks/attack-sim.d.ts +2 -0
  10. package/dist/src/checks/attack-sim.js +12 -0
  11. package/dist/src/checks/attack-sim.js.map +1 -1
  12. package/dist/src/cli.js +8 -1
  13. package/dist/src/cli.js.map +1 -1
  14. package/dist/src/commands/attack-sim.js +54 -2
  15. package/dist/src/commands/attack-sim.js.map +1 -1
  16. package/dist/src/commands/audit.d.ts +2 -0
  17. package/dist/src/commands/audit.js +132 -0
  18. package/dist/src/commands/audit.js.map +1 -0
  19. package/dist/src/commands/init-ci.d.ts +2 -0
  20. package/dist/src/commands/init-ci.js +71 -11
  21. package/dist/src/commands/init-ci.js.map +1 -1
  22. package/dist/src/commands/legacy.js +2 -0
  23. package/dist/src/commands/legacy.js.map +1 -1
  24. package/dist/src/commands/receipt.d.ts +2 -0
  25. package/dist/src/commands/receipt.js +113 -0
  26. package/dist/src/commands/receipt.js.map +1 -0
  27. package/dist/src/commands/scan.js +23 -5
  28. package/dist/src/commands/scan.js.map +1 -1
  29. package/dist/src/commands/score.js +63 -0
  30. package/dist/src/commands/score.js.map +1 -1
  31. package/dist/src/commands/setup-ci-conversion.d.ts +2 -1
  32. package/dist/src/commands/setup-ci-conversion.js +22 -8
  33. package/dist/src/commands/setup-ci-conversion.js.map +1 -1
  34. package/dist/src/commands/test.js +18 -1
  35. package/dist/src/commands/test.js.map +1 -1
  36. package/dist/src/findings.d.ts +1 -0
  37. package/dist/src/findings.js +1 -0
  38. package/dist/src/findings.js.map +1 -1
  39. package/dist/src/index.d.ts +2 -0
  40. package/dist/src/index.js +2 -0
  41. package/dist/src/index.js.map +1 -1
  42. package/dist/src/receipt.d.ts +100 -0
  43. package/dist/src/receipt.js +375 -0
  44. package/dist/src/receipt.js.map +1 -0
  45. package/dist/src/reporters/attack-sim.js +6 -1
  46. package/dist/src/reporters/attack-sim.js.map +1 -1
  47. package/dist/src/reporters/sarif.js +11 -1
  48. package/dist/src/reporters/sarif.js.map +1 -1
  49. package/dist/src/security-profiles.d.ts +13 -0
  50. package/dist/src/security-profiles.js +59 -0
  51. package/dist/src/security-profiles.js.map +1 -0
  52. package/dist/src/telemetry.d.ts +7 -0
  53. package/dist/src/telemetry.js.map +1 -1
  54. package/docs/10x-agentic-growth-sprint.md +47 -0
  55. package/docs/agent-ecosystem-promotion-plan.md +1 -1
  56. package/docs/agentic-contributor-outreach.md +52 -0
  57. package/docs/code-scanning-demo.md +2 -2
  58. package/docs/commercial-boundary.md +83 -0
  59. package/docs/contributor-proof-cards/README.md +1 -1
  60. package/docs/examples/nsa-mcp-audit-report.md +372 -0
  61. package/docs/examples/nsa-mcp-results.sarif +930 -0
  62. package/docs/examples/nsa-mcp-score.json +13 -0
  63. package/docs/feishu-lark-mcp.md +1 -1
  64. package/docs/github-code-scanning-for-mcp.md +1 -1
  65. package/docs/government-enterprise-pilot.md +93 -0
  66. package/docs/mcp-receipts.md +109 -0
  67. package/docs/mcp-server-safety-index.md +26 -25
  68. package/docs/nsa-mcp-audit-ci.md +88 -0
  69. package/docs/procurement-one-pager.md +74 -0
  70. package/docs/proof.md +2 -2
  71. package/docs/public-guidance-crosswalk.md +48 -0
  72. package/docs/safety-index/artifacts/antv-chart-server.json +41 -23
  73. package/docs/safety-index/artifacts/antv-chart-server.md +23 -10
  74. package/docs/safety-index/artifacts/browsermcp-server.json +38 -20
  75. package/docs/safety-index/artifacts/browsermcp-server.md +23 -10
  76. package/docs/safety-index/artifacts/context7-server.json +85 -28
  77. package/docs/safety-index/artifacts/context7-server.md +35 -22
  78. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +460 -36
  79. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +31 -18
  80. package/docs/safety-index/artifacts/everything-server.json +38 -20
  81. package/docs/safety-index/artifacts/everything-server.md +25 -12
  82. package/docs/safety-index/artifacts/executeautomation-playwright-server.json +155 -20
  83. package/docs/safety-index/artifacts/executeautomation-playwright-server.md +26 -13
  84. package/docs/safety-index/artifacts/filesystem-server.json +116 -22
  85. package/docs/safety-index/artifacts/filesystem-server.md +27 -14
  86. package/docs/safety-index/artifacts/kubernetes-server.json +252 -27
  87. package/docs/safety-index/artifacts/kubernetes-server.md +44 -18
  88. package/docs/safety-index/artifacts/memory-server.json +39 -21
  89. package/docs/safety-index/artifacts/memory-server.md +24 -11
  90. package/docs/safety-index/artifacts/opentofu-server.json +38 -20
  91. package/docs/safety-index/artifacts/opentofu-server.md +24 -11
  92. package/docs/safety-index/artifacts/playwright-mcp-server.json +140 -20
  93. package/docs/safety-index/artifacts/playwright-mcp-server.md +26 -13
  94. package/docs/safety-index/artifacts/promptopia-server.json +41 -23
  95. package/docs/safety-index/artifacts/promptopia-server.md +26 -13
  96. package/docs/safety-index/artifacts/puppeteer-server.json +77 -34
  97. package/docs/safety-index/artifacts/puppeteer-server.md +45 -32
  98. package/docs/safety-index/artifacts/ref-tools-server.json +38 -20
  99. package/docs/safety-index/artifacts/ref-tools-server.md +22 -9
  100. package/docs/safety-index/artifacts/sequential-thinking-server.json +39 -21
  101. package/docs/safety-index/artifacts/sequential-thinking-server.md +23 -10
  102. package/docs/security-due-diligence.md +87 -0
  103. package/docs/setup-ci-doctor.md +11 -1
  104. package/docs/tool-call-receipts.md +1 -2
  105. package/examples/insecure-mcp-server/mcp-observatory.target.json +13 -0
  106. package/examples/insecure-mcp-server/server.mjs +62 -0
  107. package/package.json +12 -1
  108. package/scripts/postinstall.mjs +22 -7
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "pass",
5
- "runId": "run_2026-07-06T014704792Z_4aa8d9c4",
6
- "createdAt": "2026-07-06T01:47:04.792Z",
7
- "toolVersion": "0.26.1",
5
+ "runId": "run_2026-07-06T194957048Z_8266b9f7",
6
+ "createdAt": "2026-07-06T19:49:57.048Z",
7
+ "toolVersion": "0.28.0",
8
8
  "target": {
9
9
  "targetId": "antv-chart-server",
10
10
  "adapter": "local-process",
@@ -25,12 +25,12 @@
25
25
  "serverVersion": "0.8.x"
26
26
  },
27
27
  "environment": {
28
- "platform": "darwin 24.0.0",
29
- "nodeVersion": "v25.8.1"
28
+ "platform": "darwin 25.5.0",
29
+ "nodeVersion": "v22.22.1"
30
30
  },
31
31
  "summary": {
32
- "total": 7,
33
- "pass": 5,
32
+ "total": 8,
33
+ "pass": 6,
34
34
  "fail": 0,
35
35
  "partial": 0,
36
36
  "unsupported": 2,
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 1.9061670000010054,
46
+ "durationMs": 1.708875000000262,
47
47
  "message": "Advertised capability responded with the minimal expected shape (27 items).",
48
48
  "evidence": [
49
49
  {
@@ -82,9 +82,9 @@
82
82
  "generate_spreadsheet"
83
83
  ],
84
84
  "diagnostics": [
85
- "[MCP-Server-Chart] 2026-07-06T01:47:05.616Z ℹ️ setting up tool handlers...",
86
- "[MCP-Server-Chart] 2026-07-06T01:47:05.617Z ℹ️ tool handlers set up",
87
- "[MCP-Server-Chart] 2026-07-06T01:47:05.618Z ✅ Stdio MCP Server started"
85
+ "[MCP-Server-Chart] 2026-07-06T19:49:57.931Z ℹ️ setting up tool handlers...",
86
+ "[MCP-Server-Chart] 2026-07-06T19:49:57.932Z ℹ️ tool handlers set up",
87
+ "[MCP-Server-Chart] 2026-07-06T19:49:57.933Z ✅ Stdio MCP Server started"
88
88
  ],
89
89
  "schemas": {
90
90
  "generate_area_chart": {
@@ -2602,7 +2602,7 @@
2602
2602
  "id": "prompts",
2603
2603
  "capability": "prompts",
2604
2604
  "status": "unsupported",
2605
- "durationMs": 0.0009579999987181509,
2605
+ "durationMs": 0.0007079999995767139,
2606
2606
  "message": "Prompts are not advertised by the target.",
2607
2607
  "evidence": [
2608
2608
  {
@@ -2618,7 +2618,7 @@
2618
2618
  "id": "resources",
2619
2619
  "capability": "resources",
2620
2620
  "status": "unsupported",
2621
- "durationMs": 0.002207999999882304,
2621
+ "durationMs": 0.0027079999999841675,
2622
2622
  "message": "Resources are not advertised by the target.",
2623
2623
  "evidence": [
2624
2624
  {
@@ -2634,7 +2634,7 @@
2634
2634
  "id": "security-lite",
2635
2635
  "capability": "security-lite",
2636
2636
  "status": "pass",
2637
- "durationMs": 0.08966599999985192,
2637
+ "durationMs": 0.07125000000087311,
2638
2638
  "message": "No security issues detected (lightweight scan).",
2639
2639
  "evidence": [
2640
2640
  {
@@ -2650,7 +2650,7 @@
2650
2650
  "id": "conformance",
2651
2651
  "capability": "conformance",
2652
2652
  "status": "pass",
2653
- "durationMs": 1.4091669999997976,
2653
+ "durationMs": 1.3637920000001031,
2654
2654
  "message": "All 7 conformance checks passed.",
2655
2655
  "evidence": [
2656
2656
  {
@@ -2676,7 +2676,7 @@
2676
2676
  "id": "schema-quality",
2677
2677
  "capability": "schema-quality",
2678
2678
  "status": "pass",
2679
- "durationMs": 1.022541000000274,
2679
+ "durationMs": 2.7793340000007447,
2680
2680
  "message": "All 27 item(s) have good schema quality.",
2681
2681
  "evidence": [
2682
2682
  {
@@ -2693,7 +2693,7 @@
2693
2693
  "id": "security",
2694
2694
  "capability": "security",
2695
2695
  "status": "pass",
2696
- "durationMs": 0.9119160000009288,
2696
+ "durationMs": 0.9060420000005251,
2697
2697
  "message": "No security issues detected.",
2698
2698
  "evidence": [
2699
2699
  {
@@ -2704,6 +2704,23 @@
2704
2704
  "itemCount": 0
2705
2705
  }
2706
2706
  ]
2707
+ },
2708
+ {
2709
+ "id": "attack-sim",
2710
+ "capability": "attack-sim",
2711
+ "status": "pass",
2712
+ "durationMs": 1.896708000000217,
2713
+ "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
2714
+ "evidence": [
2715
+ {
2716
+ "endpoint": "attack-sim/safe",
2717
+ "advertised": true,
2718
+ "responded": true,
2719
+ "minimalShapePresent": true,
2720
+ "itemCount": 0,
2721
+ "identifiers": []
2722
+ }
2723
+ ]
2707
2724
  }
2708
2725
  ],
2709
2726
  "healthScore": {
@@ -2732,7 +2749,8 @@
2732
2749
  "score": 100,
2733
2750
  "details": [
2734
2751
  "security-lite: pass (100/100)",
2735
- "security: pass (100/100)"
2752
+ "security: pass (100/100)",
2753
+ "attack-sim: pass (100/100)"
2736
2754
  ]
2737
2755
  },
2738
2756
  {
@@ -2750,16 +2768,16 @@
2750
2768
  "weight": 0.1,
2751
2769
  "score": 100,
2752
2770
  "details": [
2753
- "Connect: 830ms",
2771
+ "Connect: 887ms",
2754
2772
  "p95 latency: 2ms (3 operations)"
2755
2773
  ]
2756
2774
  }
2757
2775
  ]
2758
2776
  },
2759
2777
  "performanceMetrics": {
2760
- "connectMs": 830.341375,
2761
- "toolsListMs": 1.9061670000010054,
2762
- "promptsListMs": 0.0009579999987181509,
2763
- "resourcesListMs": 0.002207999999882304
2778
+ "connectMs": 887.4375419999997,
2779
+ "toolsListMs": 1.708875000000262,
2780
+ "promptsListMs": 0.0007079999995767139,
2781
+ "resourcesListMs": 0.0027079999999841675
2764
2782
  }
2765
2783
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-06T01:47:04.792Z
3
+ Generated at 2026-07-06T19:49:57.048Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -8,8 +8,8 @@ Generated at 2026-07-06T01:47:04.792Z
8
8
  - Adapter: `local-process`
9
9
  - Command: `npx -y @antv/mcp-server-chart`
10
10
  - Server: `mcp-server-chart 0.8.x`
11
- - Platform: `darwin 24.0.0`
12
- - Node: `v25.8.1`
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
13
 
14
14
  ## Executive Summary
15
15
 
@@ -25,7 +25,7 @@ Generated at 2026-07-06T01:47:04.792Z
25
25
 
26
26
  | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
27
27
  | --- | --- | --- | --- | --- | --- | --- | --- |
28
- | pass | 7 | 5 | 0 | 0 | 2 | 0 | 0 |
28
+ | pass | 8 | 6 | 0 | 0 | 2 | 0 | 0 |
29
29
 
30
30
  ## At a Glance
31
31
 
@@ -47,16 +47,29 @@ _Use the `diff` command against another run artifact to classify regressions and
47
47
 
48
48
  | Focus | Check | Status | Duration (ms) | Message |
49
49
  | --- | --- | --- | --- | --- |
50
- | healthy | conformance | pass | 1.41 | All 7 conformance checks passed. |
51
- | healthy | schema-quality | pass | 1.02 | All 27 item(s) have good schema quality. |
50
+ | healthy | attack-sim | pass | 1.90 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
51
+ | healthy | conformance | pass | 1.36 | All 7 conformance checks passed. |
52
+ | healthy | schema-quality | pass | 2.78 | All 27 item(s) have good schema quality. |
52
53
  | healthy | security | pass | 0.91 | No security issues detected. |
53
- | healthy | security-lite | pass | 0.09 | No security issues detected (lightweight scan). |
54
- | healthy | tools | pass | 1.91 | Advertised capability responded with the minimal expected shape (27 items). |
54
+ | healthy | security-lite | pass | 0.07 | No security issues detected (lightweight scan). |
55
+ | healthy | tools | pass | 1.71 | Advertised capability responded with the minimal expected shape (27 items). |
55
56
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
56
57
  | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
57
58
 
58
59
  ## Evidence Snippets
59
60
 
61
+ ### attack-sim — pass
62
+
63
+ Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
64
+
65
+ - Endpoint: `attack-sim/safe`
66
+ - Advertised: `true`
67
+ - Responded: `true`
68
+ - Minimal shape present: `true`
69
+ - Item count: `0`
70
+ - Identifiers: none
71
+ - Diagnostics: none
72
+
60
73
  ### conformance — pass
61
74
 
62
75
  Summary: All 7 conformance checks passed.
@@ -115,7 +128,7 @@ Summary: Advertised capability responded with the minimal expected shape (27 ite
115
128
  - Minimal shape present: `true`
116
129
  - Item count: `27`
117
130
  - Identifiers: generate_area_chart, generate_bar_chart, generate_boxplot_chart, generate_column_chart, generate_district_map (+22 more)
118
- - Diagnostics: [MCP-Server-Chart] 2026-07-06T01:47:05.616Z ℹ️ setting up tool handlers..., [MCP-Server-Chart] 2026-07-06T01:47:05.617Z ℹ️ tool handlers set up, [MCP-Server-Chart] 2026-07-06T01:47:05.618Z ✅ Stdio MCP Server started
131
+ - Diagnostics: [MCP-Server-Chart] 2026-07-06T19:49:57.931Z ℹ️ setting up tool handlers..., [MCP-Server-Chart] 2026-07-06T19:49:57.932Z ℹ️ tool handlers set up, [MCP-Server-Chart] 2026-07-06T19:49:57.933Z ✅ Stdio MCP Server started
119
132
 
120
133
  ### prompts — unsupported
121
134
 
@@ -152,5 +165,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
152
165
 
153
166
  - Artifact type: `run`
154
167
  - Schema version: `1.0.0`
155
- - Run ID: `run_2026-07-06T014704792Z_4aa8d9c4`
168
+ - Run ID: `run_2026-07-06T194957048Z_8266b9f7`
156
169
  - Gate: `pass`
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "pass",
5
- "runId": "run_2026-07-06T014702689Z_66630a02",
6
- "createdAt": "2026-07-06T01:47:02.689Z",
7
- "toolVersion": "0.26.1",
5
+ "runId": "run_2026-07-06T194954693Z_39638a36",
6
+ "createdAt": "2026-07-06T19:49:54.694Z",
7
+ "toolVersion": "0.28.0",
8
8
  "target": {
9
9
  "targetId": "browsermcp-server",
10
10
  "adapter": "local-process",
@@ -25,12 +25,12 @@
25
25
  "serverVersion": "0.1.3"
26
26
  },
27
27
  "environment": {
28
- "platform": "darwin 24.0.0",
29
- "nodeVersion": "v25.8.1"
28
+ "platform": "darwin 25.5.0",
29
+ "nodeVersion": "v22.22.1"
30
30
  },
31
31
  "summary": {
32
- "total": 7,
33
- "pass": 6,
32
+ "total": 8,
33
+ "pass": 7,
34
34
  "fail": 0,
35
35
  "partial": 0,
36
36
  "unsupported": 1,
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 0.9707080000007409,
46
+ "durationMs": 0.8151659999984986,
47
47
  "message": "Advertised capability responded with the minimal expected shape (12 items).",
48
48
  "evidence": [
49
49
  {
@@ -242,7 +242,7 @@
242
242
  "id": "prompts",
243
243
  "capability": "prompts",
244
244
  "status": "unsupported",
245
- "durationMs": 0.0007919999989098869,
245
+ "durationMs": 0.0005419999997684499,
246
246
  "message": "Prompts are not advertised by the target.",
247
247
  "evidence": [
248
248
  {
@@ -258,7 +258,7 @@
258
258
  "id": "resources",
259
259
  "capability": "resources",
260
260
  "status": "pass",
261
- "durationMs": 0.6247500000008586,
261
+ "durationMs": 0.4444999999996071,
262
262
  "message": "Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported.",
263
263
  "evidence": [
264
264
  {
@@ -285,7 +285,7 @@
285
285
  "id": "security-lite",
286
286
  "capability": "security-lite",
287
287
  "status": "pass",
288
- "durationMs": 0.02770799999962037,
288
+ "durationMs": 0.025958000000173342,
289
289
  "message": "No security issues detected (lightweight scan).",
290
290
  "evidence": [
291
291
  {
@@ -301,7 +301,7 @@
301
301
  "id": "conformance",
302
302
  "capability": "conformance",
303
303
  "status": "pass",
304
- "durationMs": 1.5951249999998254,
304
+ "durationMs": 1.574958000001061,
305
305
  "message": "All 7 conformance checks passed.",
306
306
  "evidence": [
307
307
  {
@@ -327,7 +327,7 @@
327
327
  "id": "schema-quality",
328
328
  "capability": "schema-quality",
329
329
  "status": "pass",
330
- "durationMs": 0.48875000000043656,
330
+ "durationMs": 0.36616700000013225,
331
331
  "message": "All 12 item(s) have good schema quality.",
332
332
  "evidence": [
333
333
  {
@@ -344,7 +344,7 @@
344
344
  "id": "security",
345
345
  "capability": "security",
346
346
  "status": "pass",
347
- "durationMs": 0.25716600000123435,
347
+ "durationMs": 0.15450000000055297,
348
348
  "message": "No security issues detected.",
349
349
  "evidence": [
350
350
  {
@@ -355,6 +355,23 @@
355
355
  "itemCount": 0
356
356
  }
357
357
  ]
358
+ },
359
+ {
360
+ "id": "attack-sim",
361
+ "capability": "attack-sim",
362
+ "status": "pass",
363
+ "durationMs": 0.5073330000013812,
364
+ "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
365
+ "evidence": [
366
+ {
367
+ "endpoint": "attack-sim/safe",
368
+ "advertised": true,
369
+ "responded": true,
370
+ "minimalShapePresent": true,
371
+ "itemCount": 0,
372
+ "identifiers": []
373
+ }
374
+ ]
358
375
  }
359
376
  ],
360
377
  "healthScore": {
@@ -383,7 +400,8 @@
383
400
  "score": 100,
384
401
  "details": [
385
402
  "security-lite: pass (100/100)",
386
- "security: pass (100/100)"
403
+ "security: pass (100/100)",
404
+ "attack-sim: pass (100/100)"
387
405
  ]
388
406
  },
389
407
  {
@@ -401,16 +419,16 @@
401
419
  "weight": 0.1,
402
420
  "score": 100,
403
421
  "details": [
404
- "Connect: 705ms",
422
+ "Connect: 652ms",
405
423
  "p95 latency: 1ms (3 operations)"
406
424
  ]
407
425
  }
408
426
  ]
409
427
  },
410
428
  "performanceMetrics": {
411
- "connectMs": 705.3232910000006,
412
- "toolsListMs": 0.9707080000007409,
413
- "promptsListMs": 0.0007919999989098869,
414
- "resourcesListMs": 0.6247500000008586
429
+ "connectMs": 651.8255829999998,
430
+ "toolsListMs": 0.8151659999984986,
431
+ "promptsListMs": 0.0005419999997684499,
432
+ "resourcesListMs": 0.4444999999996071
415
433
  }
416
434
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-06T01:47:02.689Z
3
+ Generated at 2026-07-06T19:49:54.694Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -8,8 +8,8 @@ Generated at 2026-07-06T01:47:02.689Z
8
8
  - Adapter: `local-process`
9
9
  - Command: `npx -y @browsermcp/mcp`
10
10
  - Server: `Browser MCP 0.1.3`
11
- - Platform: `darwin 24.0.0`
12
- - Node: `v25.8.1`
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
13
 
14
14
  ## Executive Summary
15
15
 
@@ -25,7 +25,7 @@ Generated at 2026-07-06T01:47:02.689Z
25
25
 
26
26
  | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
27
27
  | --- | --- | --- | --- | --- | --- | --- | --- |
28
- | pass | 7 | 6 | 0 | 0 | 1 | 0 | 0 |
28
+ | pass | 8 | 7 | 0 | 0 | 1 | 0 | 0 |
29
29
 
30
30
  ## At a Glance
31
31
 
@@ -47,16 +47,29 @@ _Use the `diff` command against another run artifact to classify regressions and
47
47
 
48
48
  | Focus | Check | Status | Duration (ms) | Message |
49
49
  | --- | --- | --- | --- | --- |
50
- | healthy | conformance | pass | 1.60 | All 7 conformance checks passed. |
51
- | healthy | resources | pass | 0.62 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
52
- | healthy | schema-quality | pass | 0.49 | All 12 item(s) have good schema quality. |
53
- | healthy | security | pass | 0.26 | No security issues detected. |
50
+ | healthy | attack-sim | pass | 0.51 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
51
+ | healthy | conformance | pass | 1.57 | All 7 conformance checks passed. |
52
+ | healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
53
+ | healthy | schema-quality | pass | 0.37 | All 12 item(s) have good schema quality. |
54
+ | healthy | security | pass | 0.15 | No security issues detected. |
54
55
  | healthy | security-lite | pass | 0.03 | No security issues detected (lightweight scan). |
55
- | healthy | tools | pass | 0.97 | Advertised capability responded with the minimal expected shape (12 items). |
56
+ | healthy | tools | pass | 0.82 | Advertised capability responded with the minimal expected shape (12 items). |
56
57
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
57
58
 
58
59
  ## Evidence Snippets
59
60
 
61
+ ### attack-sim — pass
62
+
63
+ Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
64
+
65
+ - Endpoint: `attack-sim/safe`
66
+ - Advertised: `true`
67
+ - Responded: `true`
68
+ - Minimal shape present: `true`
69
+ - Item count: `0`
70
+ - Identifiers: none
71
+ - Diagnostics: none
72
+
60
73
  ### conformance — pass
61
74
 
62
75
  Summary: All 7 conformance checks passed.
@@ -159,5 +172,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
159
172
 
160
173
  - Artifact type: `run`
161
174
  - Schema version: `1.0.0`
162
- - Run ID: `run_2026-07-06T014702689Z_66630a02`
175
+ - Run ID: `run_2026-07-06T194954693Z_39638a36`
163
176
  - Gate: `pass`