@kryptosai/mcp-observatory 0.28.0 → 1.28.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/COMMERCIAL.md +26 -5
- package/README.md +65 -12
- package/dist/src/action-receipt.d.ts +20 -0
- package/dist/src/action-receipt.js +85 -0
- package/dist/src/action-receipt.js.map +1 -0
- package/dist/src/audit.d.ts +64 -0
- package/dist/src/audit.js +359 -0
- package/dist/src/audit.js.map +1 -0
- package/dist/src/checks/attack-sim.d.ts +2 -0
- package/dist/src/checks/attack-sim.js +12 -0
- package/dist/src/checks/attack-sim.js.map +1 -1
- package/dist/src/cli.js +8 -1
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/attack-sim.js +54 -2
- package/dist/src/commands/attack-sim.js.map +1 -1
- package/dist/src/commands/audit.d.ts +2 -0
- package/dist/src/commands/audit.js +132 -0
- package/dist/src/commands/audit.js.map +1 -0
- package/dist/src/commands/init-ci.d.ts +2 -0
- package/dist/src/commands/init-ci.js +71 -11
- package/dist/src/commands/init-ci.js.map +1 -1
- package/dist/src/commands/legacy.js +2 -0
- package/dist/src/commands/legacy.js.map +1 -1
- package/dist/src/commands/receipt.d.ts +2 -0
- package/dist/src/commands/receipt.js +113 -0
- package/dist/src/commands/receipt.js.map +1 -0
- package/dist/src/commands/scan.js +23 -5
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/score.js +63 -0
- package/dist/src/commands/score.js.map +1 -1
- package/dist/src/commands/setup-ci-conversion.d.ts +2 -1
- package/dist/src/commands/setup-ci-conversion.js +22 -8
- package/dist/src/commands/setup-ci-conversion.js.map +1 -1
- package/dist/src/commands/test.js +18 -1
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/findings.d.ts +1 -0
- package/dist/src/findings.js +1 -0
- package/dist/src/findings.js.map +1 -1
- package/dist/src/index.d.ts +2 -0
- package/dist/src/index.js +2 -0
- package/dist/src/index.js.map +1 -1
- package/dist/src/receipt.d.ts +100 -0
- package/dist/src/receipt.js +375 -0
- package/dist/src/receipt.js.map +1 -0
- package/dist/src/reporters/attack-sim.js +6 -1
- package/dist/src/reporters/attack-sim.js.map +1 -1
- package/dist/src/reporters/sarif.js +11 -1
- package/dist/src/reporters/sarif.js.map +1 -1
- package/dist/src/security-profiles.d.ts +13 -0
- package/dist/src/security-profiles.js +59 -0
- package/dist/src/security-profiles.js.map +1 -0
- package/dist/src/telemetry.d.ts +7 -0
- package/dist/src/telemetry.js.map +1 -1
- package/docs/10x-agentic-growth-sprint.md +47 -0
- package/docs/agent-ecosystem-promotion-plan.md +1 -1
- package/docs/agentic-contributor-outreach.md +52 -0
- package/docs/code-scanning-demo.md +2 -2
- package/docs/commercial-boundary.md +83 -0
- package/docs/contributor-proof-cards/README.md +1 -1
- package/docs/examples/nsa-mcp-audit-report.md +372 -0
- package/docs/examples/nsa-mcp-results.sarif +930 -0
- package/docs/examples/nsa-mcp-score.json +13 -0
- package/docs/feishu-lark-mcp.md +1 -1
- package/docs/github-code-scanning-for-mcp.md +1 -1
- package/docs/government-enterprise-pilot.md +93 -0
- package/docs/mcp-receipts.md +109 -0
- package/docs/mcp-server-safety-index.md +26 -25
- package/docs/nsa-mcp-audit-ci.md +88 -0
- package/docs/procurement-one-pager.md +74 -0
- package/docs/proof.md +2 -2
- package/docs/public-guidance-crosswalk.md +48 -0
- package/docs/safety-index/artifacts/antv-chart-server.json +41 -23
- package/docs/safety-index/artifacts/antv-chart-server.md +23 -10
- package/docs/safety-index/artifacts/browsermcp-server.json +38 -20
- package/docs/safety-index/artifacts/browsermcp-server.md +23 -10
- package/docs/safety-index/artifacts/context7-server.json +85 -28
- package/docs/safety-index/artifacts/context7-server.md +35 -22
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +460 -36
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +31 -18
- package/docs/safety-index/artifacts/everything-server.json +38 -20
- package/docs/safety-index/artifacts/everything-server.md +25 -12
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +155 -20
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +26 -13
- package/docs/safety-index/artifacts/filesystem-server.json +116 -22
- package/docs/safety-index/artifacts/filesystem-server.md +27 -14
- package/docs/safety-index/artifacts/kubernetes-server.json +252 -27
- package/docs/safety-index/artifacts/kubernetes-server.md +44 -18
- package/docs/safety-index/artifacts/memory-server.json +39 -21
- package/docs/safety-index/artifacts/memory-server.md +24 -11
- package/docs/safety-index/artifacts/opentofu-server.json +38 -20
- package/docs/safety-index/artifacts/opentofu-server.md +24 -11
- package/docs/safety-index/artifacts/playwright-mcp-server.json +140 -20
- package/docs/safety-index/artifacts/playwright-mcp-server.md +26 -13
- package/docs/safety-index/artifacts/promptopia-server.json +41 -23
- package/docs/safety-index/artifacts/promptopia-server.md +26 -13
- package/docs/safety-index/artifacts/puppeteer-server.json +77 -34
- package/docs/safety-index/artifacts/puppeteer-server.md +45 -32
- package/docs/safety-index/artifacts/ref-tools-server.json +38 -20
- package/docs/safety-index/artifacts/ref-tools-server.md +22 -9
- package/docs/safety-index/artifacts/sequential-thinking-server.json +39 -21
- package/docs/safety-index/artifacts/sequential-thinking-server.md +23 -10
- package/docs/security-due-diligence.md +87 -0
- package/docs/setup-ci-doctor.md +11 -1
- package/docs/tool-call-receipts.md +1 -2
- package/examples/insecure-mcp-server/mcp-observatory.target.json +13 -0
- package/examples/insecure-mcp-server/server.mjs +62 -0
- package/package.json +12 -1
- package/scripts/postinstall.mjs +22 -7
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
"artifactType": "run",
|
|
3
3
|
"schemaVersion": "1.0.0",
|
|
4
4
|
"gate": "pass",
|
|
5
|
-
"runId": "run_2026-07-
|
|
6
|
-
"createdAt": "2026-07-
|
|
7
|
-
"toolVersion": "0.
|
|
5
|
+
"runId": "run_2026-07-06T194957048Z_8266b9f7",
|
|
6
|
+
"createdAt": "2026-07-06T19:49:57.048Z",
|
|
7
|
+
"toolVersion": "0.28.0",
|
|
8
8
|
"target": {
|
|
9
9
|
"targetId": "antv-chart-server",
|
|
10
10
|
"adapter": "local-process",
|
|
@@ -25,12 +25,12 @@
|
|
|
25
25
|
"serverVersion": "0.8.x"
|
|
26
26
|
},
|
|
27
27
|
"environment": {
|
|
28
|
-
"platform": "darwin
|
|
29
|
-
"nodeVersion": "
|
|
28
|
+
"platform": "darwin 25.5.0",
|
|
29
|
+
"nodeVersion": "v22.22.1"
|
|
30
30
|
},
|
|
31
31
|
"summary": {
|
|
32
|
-
"total":
|
|
33
|
-
"pass":
|
|
32
|
+
"total": 8,
|
|
33
|
+
"pass": 6,
|
|
34
34
|
"fail": 0,
|
|
35
35
|
"partial": 0,
|
|
36
36
|
"unsupported": 2,
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
"id": "tools",
|
|
44
44
|
"capability": "tools",
|
|
45
45
|
"status": "pass",
|
|
46
|
-
"durationMs": 1.
|
|
46
|
+
"durationMs": 1.708875000000262,
|
|
47
47
|
"message": "Advertised capability responded with the minimal expected shape (27 items).",
|
|
48
48
|
"evidence": [
|
|
49
49
|
{
|
|
@@ -82,9 +82,9 @@
|
|
|
82
82
|
"generate_spreadsheet"
|
|
83
83
|
],
|
|
84
84
|
"diagnostics": [
|
|
85
|
-
"[MCP-Server-Chart] 2026-07-
|
|
86
|
-
"[MCP-Server-Chart] 2026-07-
|
|
87
|
-
"[MCP-Server-Chart] 2026-07-
|
|
85
|
+
"[MCP-Server-Chart] 2026-07-06T19:49:57.931Z ℹ️ setting up tool handlers...",
|
|
86
|
+
"[MCP-Server-Chart] 2026-07-06T19:49:57.932Z ℹ️ tool handlers set up",
|
|
87
|
+
"[MCP-Server-Chart] 2026-07-06T19:49:57.933Z ✅ Stdio MCP Server started"
|
|
88
88
|
],
|
|
89
89
|
"schemas": {
|
|
90
90
|
"generate_area_chart": {
|
|
@@ -2602,7 +2602,7 @@
|
|
|
2602
2602
|
"id": "prompts",
|
|
2603
2603
|
"capability": "prompts",
|
|
2604
2604
|
"status": "unsupported",
|
|
2605
|
-
"durationMs": 0.
|
|
2605
|
+
"durationMs": 0.0007079999995767139,
|
|
2606
2606
|
"message": "Prompts are not advertised by the target.",
|
|
2607
2607
|
"evidence": [
|
|
2608
2608
|
{
|
|
@@ -2618,7 +2618,7 @@
|
|
|
2618
2618
|
"id": "resources",
|
|
2619
2619
|
"capability": "resources",
|
|
2620
2620
|
"status": "unsupported",
|
|
2621
|
-
"durationMs": 0.
|
|
2621
|
+
"durationMs": 0.0027079999999841675,
|
|
2622
2622
|
"message": "Resources are not advertised by the target.",
|
|
2623
2623
|
"evidence": [
|
|
2624
2624
|
{
|
|
@@ -2634,7 +2634,7 @@
|
|
|
2634
2634
|
"id": "security-lite",
|
|
2635
2635
|
"capability": "security-lite",
|
|
2636
2636
|
"status": "pass",
|
|
2637
|
-
"durationMs": 0.
|
|
2637
|
+
"durationMs": 0.07125000000087311,
|
|
2638
2638
|
"message": "No security issues detected (lightweight scan).",
|
|
2639
2639
|
"evidence": [
|
|
2640
2640
|
{
|
|
@@ -2650,7 +2650,7 @@
|
|
|
2650
2650
|
"id": "conformance",
|
|
2651
2651
|
"capability": "conformance",
|
|
2652
2652
|
"status": "pass",
|
|
2653
|
-
"durationMs": 1.
|
|
2653
|
+
"durationMs": 1.3637920000001031,
|
|
2654
2654
|
"message": "All 7 conformance checks passed.",
|
|
2655
2655
|
"evidence": [
|
|
2656
2656
|
{
|
|
@@ -2676,7 +2676,7 @@
|
|
|
2676
2676
|
"id": "schema-quality",
|
|
2677
2677
|
"capability": "schema-quality",
|
|
2678
2678
|
"status": "pass",
|
|
2679
|
-
"durationMs":
|
|
2679
|
+
"durationMs": 2.7793340000007447,
|
|
2680
2680
|
"message": "All 27 item(s) have good schema quality.",
|
|
2681
2681
|
"evidence": [
|
|
2682
2682
|
{
|
|
@@ -2693,7 +2693,7 @@
|
|
|
2693
2693
|
"id": "security",
|
|
2694
2694
|
"capability": "security",
|
|
2695
2695
|
"status": "pass",
|
|
2696
|
-
"durationMs": 0.
|
|
2696
|
+
"durationMs": 0.9060420000005251,
|
|
2697
2697
|
"message": "No security issues detected.",
|
|
2698
2698
|
"evidence": [
|
|
2699
2699
|
{
|
|
@@ -2704,6 +2704,23 @@
|
|
|
2704
2704
|
"itemCount": 0
|
|
2705
2705
|
}
|
|
2706
2706
|
]
|
|
2707
|
+
},
|
|
2708
|
+
{
|
|
2709
|
+
"id": "attack-sim",
|
|
2710
|
+
"capability": "attack-sim",
|
|
2711
|
+
"status": "pass",
|
|
2712
|
+
"durationMs": 1.896708000000217,
|
|
2713
|
+
"message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
|
|
2714
|
+
"evidence": [
|
|
2715
|
+
{
|
|
2716
|
+
"endpoint": "attack-sim/safe",
|
|
2717
|
+
"advertised": true,
|
|
2718
|
+
"responded": true,
|
|
2719
|
+
"minimalShapePresent": true,
|
|
2720
|
+
"itemCount": 0,
|
|
2721
|
+
"identifiers": []
|
|
2722
|
+
}
|
|
2723
|
+
]
|
|
2707
2724
|
}
|
|
2708
2725
|
],
|
|
2709
2726
|
"healthScore": {
|
|
@@ -2732,7 +2749,8 @@
|
|
|
2732
2749
|
"score": 100,
|
|
2733
2750
|
"details": [
|
|
2734
2751
|
"security-lite: pass (100/100)",
|
|
2735
|
-
"security: pass (100/100)"
|
|
2752
|
+
"security: pass (100/100)",
|
|
2753
|
+
"attack-sim: pass (100/100)"
|
|
2736
2754
|
]
|
|
2737
2755
|
},
|
|
2738
2756
|
{
|
|
@@ -2750,16 +2768,16 @@
|
|
|
2750
2768
|
"weight": 0.1,
|
|
2751
2769
|
"score": 100,
|
|
2752
2770
|
"details": [
|
|
2753
|
-
"Connect:
|
|
2771
|
+
"Connect: 887ms",
|
|
2754
2772
|
"p95 latency: 2ms (3 operations)"
|
|
2755
2773
|
]
|
|
2756
2774
|
}
|
|
2757
2775
|
]
|
|
2758
2776
|
},
|
|
2759
2777
|
"performanceMetrics": {
|
|
2760
|
-
"connectMs":
|
|
2761
|
-
"toolsListMs": 1.
|
|
2762
|
-
"promptsListMs": 0.
|
|
2763
|
-
"resourcesListMs": 0.
|
|
2778
|
+
"connectMs": 887.4375419999997,
|
|
2779
|
+
"toolsListMs": 1.708875000000262,
|
|
2780
|
+
"promptsListMs": 0.0007079999995767139,
|
|
2781
|
+
"resourcesListMs": 0.0027079999999841675
|
|
2764
2782
|
}
|
|
2765
2783
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# MCP Observatory Run Report
|
|
2
2
|
|
|
3
|
-
Generated at 2026-07-
|
|
3
|
+
Generated at 2026-07-06T19:49:57.048Z
|
|
4
4
|
|
|
5
5
|
## Target and Environment Metadata
|
|
6
6
|
|
|
@@ -8,8 +8,8 @@ Generated at 2026-07-06T01:47:04.792Z
|
|
|
8
8
|
- Adapter: `local-process`
|
|
9
9
|
- Command: `npx -y @antv/mcp-server-chart`
|
|
10
10
|
- Server: `mcp-server-chart 0.8.x`
|
|
11
|
-
- Platform: `darwin
|
|
12
|
-
- Node: `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
13
|
|
|
14
14
|
## Executive Summary
|
|
15
15
|
|
|
@@ -25,7 +25,7 @@ Generated at 2026-07-06T01:47:04.792Z
|
|
|
25
25
|
|
|
26
26
|
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
27
27
|
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
28
|
-
| pass |
|
|
28
|
+
| pass | 8 | 6 | 0 | 0 | 2 | 0 | 0 |
|
|
29
29
|
|
|
30
30
|
## At a Glance
|
|
31
31
|
|
|
@@ -47,16 +47,29 @@ _Use the `diff` command against another run artifact to classify regressions and
|
|
|
47
47
|
|
|
48
48
|
| Focus | Check | Status | Duration (ms) | Message |
|
|
49
49
|
| --- | --- | --- | --- | --- |
|
|
50
|
-
| healthy |
|
|
51
|
-
| healthy |
|
|
50
|
+
| healthy | attack-sim | pass | 1.90 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
|
|
51
|
+
| healthy | conformance | pass | 1.36 | All 7 conformance checks passed. |
|
|
52
|
+
| healthy | schema-quality | pass | 2.78 | All 27 item(s) have good schema quality. |
|
|
52
53
|
| healthy | security | pass | 0.91 | No security issues detected. |
|
|
53
|
-
| healthy | security-lite | pass | 0.
|
|
54
|
-
| healthy | tools | pass | 1.
|
|
54
|
+
| healthy | security-lite | pass | 0.07 | No security issues detected (lightweight scan). |
|
|
55
|
+
| healthy | tools | pass | 1.71 | Advertised capability responded with the minimal expected shape (27 items). |
|
|
55
56
|
| confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
|
|
56
57
|
| confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
|
|
57
58
|
|
|
58
59
|
## Evidence Snippets
|
|
59
60
|
|
|
61
|
+
### attack-sim — pass
|
|
62
|
+
|
|
63
|
+
Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
|
|
64
|
+
|
|
65
|
+
- Endpoint: `attack-sim/safe`
|
|
66
|
+
- Advertised: `true`
|
|
67
|
+
- Responded: `true`
|
|
68
|
+
- Minimal shape present: `true`
|
|
69
|
+
- Item count: `0`
|
|
70
|
+
- Identifiers: none
|
|
71
|
+
- Diagnostics: none
|
|
72
|
+
|
|
60
73
|
### conformance — pass
|
|
61
74
|
|
|
62
75
|
Summary: All 7 conformance checks passed.
|
|
@@ -115,7 +128,7 @@ Summary: Advertised capability responded with the minimal expected shape (27 ite
|
|
|
115
128
|
- Minimal shape present: `true`
|
|
116
129
|
- Item count: `27`
|
|
117
130
|
- Identifiers: generate_area_chart, generate_bar_chart, generate_boxplot_chart, generate_column_chart, generate_district_map (+22 more)
|
|
118
|
-
- Diagnostics: [MCP-Server-Chart] 2026-07-
|
|
131
|
+
- Diagnostics: [MCP-Server-Chart] 2026-07-06T19:49:57.931Z ℹ️ setting up tool handlers..., [MCP-Server-Chart] 2026-07-06T19:49:57.932Z ℹ️ tool handlers set up, [MCP-Server-Chart] 2026-07-06T19:49:57.933Z ✅ Stdio MCP Server started
|
|
119
132
|
|
|
120
133
|
### prompts — unsupported
|
|
121
134
|
|
|
@@ -152,5 +165,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
|
152
165
|
|
|
153
166
|
- Artifact type: `run`
|
|
154
167
|
- Schema version: `1.0.0`
|
|
155
|
-
- Run ID: `run_2026-07-
|
|
168
|
+
- Run ID: `run_2026-07-06T194957048Z_8266b9f7`
|
|
156
169
|
- Gate: `pass`
|
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
"artifactType": "run",
|
|
3
3
|
"schemaVersion": "1.0.0",
|
|
4
4
|
"gate": "pass",
|
|
5
|
-
"runId": "run_2026-07-
|
|
6
|
-
"createdAt": "2026-07-
|
|
7
|
-
"toolVersion": "0.
|
|
5
|
+
"runId": "run_2026-07-06T194954693Z_39638a36",
|
|
6
|
+
"createdAt": "2026-07-06T19:49:54.694Z",
|
|
7
|
+
"toolVersion": "0.28.0",
|
|
8
8
|
"target": {
|
|
9
9
|
"targetId": "browsermcp-server",
|
|
10
10
|
"adapter": "local-process",
|
|
@@ -25,12 +25,12 @@
|
|
|
25
25
|
"serverVersion": "0.1.3"
|
|
26
26
|
},
|
|
27
27
|
"environment": {
|
|
28
|
-
"platform": "darwin
|
|
29
|
-
"nodeVersion": "
|
|
28
|
+
"platform": "darwin 25.5.0",
|
|
29
|
+
"nodeVersion": "v22.22.1"
|
|
30
30
|
},
|
|
31
31
|
"summary": {
|
|
32
|
-
"total":
|
|
33
|
-
"pass":
|
|
32
|
+
"total": 8,
|
|
33
|
+
"pass": 7,
|
|
34
34
|
"fail": 0,
|
|
35
35
|
"partial": 0,
|
|
36
36
|
"unsupported": 1,
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
"id": "tools",
|
|
44
44
|
"capability": "tools",
|
|
45
45
|
"status": "pass",
|
|
46
|
-
"durationMs": 0.
|
|
46
|
+
"durationMs": 0.8151659999984986,
|
|
47
47
|
"message": "Advertised capability responded with the minimal expected shape (12 items).",
|
|
48
48
|
"evidence": [
|
|
49
49
|
{
|
|
@@ -242,7 +242,7 @@
|
|
|
242
242
|
"id": "prompts",
|
|
243
243
|
"capability": "prompts",
|
|
244
244
|
"status": "unsupported",
|
|
245
|
-
"durationMs": 0.
|
|
245
|
+
"durationMs": 0.0005419999997684499,
|
|
246
246
|
"message": "Prompts are not advertised by the target.",
|
|
247
247
|
"evidence": [
|
|
248
248
|
{
|
|
@@ -258,7 +258,7 @@
|
|
|
258
258
|
"id": "resources",
|
|
259
259
|
"capability": "resources",
|
|
260
260
|
"status": "pass",
|
|
261
|
-
"durationMs": 0.
|
|
261
|
+
"durationMs": 0.4444999999996071,
|
|
262
262
|
"message": "Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported.",
|
|
263
263
|
"evidence": [
|
|
264
264
|
{
|
|
@@ -285,7 +285,7 @@
|
|
|
285
285
|
"id": "security-lite",
|
|
286
286
|
"capability": "security-lite",
|
|
287
287
|
"status": "pass",
|
|
288
|
-
"durationMs": 0.
|
|
288
|
+
"durationMs": 0.025958000000173342,
|
|
289
289
|
"message": "No security issues detected (lightweight scan).",
|
|
290
290
|
"evidence": [
|
|
291
291
|
{
|
|
@@ -301,7 +301,7 @@
|
|
|
301
301
|
"id": "conformance",
|
|
302
302
|
"capability": "conformance",
|
|
303
303
|
"status": "pass",
|
|
304
|
-
"durationMs": 1.
|
|
304
|
+
"durationMs": 1.574958000001061,
|
|
305
305
|
"message": "All 7 conformance checks passed.",
|
|
306
306
|
"evidence": [
|
|
307
307
|
{
|
|
@@ -327,7 +327,7 @@
|
|
|
327
327
|
"id": "schema-quality",
|
|
328
328
|
"capability": "schema-quality",
|
|
329
329
|
"status": "pass",
|
|
330
|
-
"durationMs": 0.
|
|
330
|
+
"durationMs": 0.36616700000013225,
|
|
331
331
|
"message": "All 12 item(s) have good schema quality.",
|
|
332
332
|
"evidence": [
|
|
333
333
|
{
|
|
@@ -344,7 +344,7 @@
|
|
|
344
344
|
"id": "security",
|
|
345
345
|
"capability": "security",
|
|
346
346
|
"status": "pass",
|
|
347
|
-
"durationMs": 0.
|
|
347
|
+
"durationMs": 0.15450000000055297,
|
|
348
348
|
"message": "No security issues detected.",
|
|
349
349
|
"evidence": [
|
|
350
350
|
{
|
|
@@ -355,6 +355,23 @@
|
|
|
355
355
|
"itemCount": 0
|
|
356
356
|
}
|
|
357
357
|
]
|
|
358
|
+
},
|
|
359
|
+
{
|
|
360
|
+
"id": "attack-sim",
|
|
361
|
+
"capability": "attack-sim",
|
|
362
|
+
"status": "pass",
|
|
363
|
+
"durationMs": 0.5073330000013812,
|
|
364
|
+
"message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
|
|
365
|
+
"evidence": [
|
|
366
|
+
{
|
|
367
|
+
"endpoint": "attack-sim/safe",
|
|
368
|
+
"advertised": true,
|
|
369
|
+
"responded": true,
|
|
370
|
+
"minimalShapePresent": true,
|
|
371
|
+
"itemCount": 0,
|
|
372
|
+
"identifiers": []
|
|
373
|
+
}
|
|
374
|
+
]
|
|
358
375
|
}
|
|
359
376
|
],
|
|
360
377
|
"healthScore": {
|
|
@@ -383,7 +400,8 @@
|
|
|
383
400
|
"score": 100,
|
|
384
401
|
"details": [
|
|
385
402
|
"security-lite: pass (100/100)",
|
|
386
|
-
"security: pass (100/100)"
|
|
403
|
+
"security: pass (100/100)",
|
|
404
|
+
"attack-sim: pass (100/100)"
|
|
387
405
|
]
|
|
388
406
|
},
|
|
389
407
|
{
|
|
@@ -401,16 +419,16 @@
|
|
|
401
419
|
"weight": 0.1,
|
|
402
420
|
"score": 100,
|
|
403
421
|
"details": [
|
|
404
|
-
"Connect:
|
|
422
|
+
"Connect: 652ms",
|
|
405
423
|
"p95 latency: 1ms (3 operations)"
|
|
406
424
|
]
|
|
407
425
|
}
|
|
408
426
|
]
|
|
409
427
|
},
|
|
410
428
|
"performanceMetrics": {
|
|
411
|
-
"connectMs":
|
|
412
|
-
"toolsListMs": 0.
|
|
413
|
-
"promptsListMs": 0.
|
|
414
|
-
"resourcesListMs": 0.
|
|
429
|
+
"connectMs": 651.8255829999998,
|
|
430
|
+
"toolsListMs": 0.8151659999984986,
|
|
431
|
+
"promptsListMs": 0.0005419999997684499,
|
|
432
|
+
"resourcesListMs": 0.4444999999996071
|
|
415
433
|
}
|
|
416
434
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# MCP Observatory Run Report
|
|
2
2
|
|
|
3
|
-
Generated at 2026-07-
|
|
3
|
+
Generated at 2026-07-06T19:49:54.694Z
|
|
4
4
|
|
|
5
5
|
## Target and Environment Metadata
|
|
6
6
|
|
|
@@ -8,8 +8,8 @@ Generated at 2026-07-06T01:47:02.689Z
|
|
|
8
8
|
- Adapter: `local-process`
|
|
9
9
|
- Command: `npx -y @browsermcp/mcp`
|
|
10
10
|
- Server: `Browser MCP 0.1.3`
|
|
11
|
-
- Platform: `darwin
|
|
12
|
-
- Node: `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
13
|
|
|
14
14
|
## Executive Summary
|
|
15
15
|
|
|
@@ -25,7 +25,7 @@ Generated at 2026-07-06T01:47:02.689Z
|
|
|
25
25
|
|
|
26
26
|
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
27
27
|
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
28
|
-
| pass |
|
|
28
|
+
| pass | 8 | 7 | 0 | 0 | 1 | 0 | 0 |
|
|
29
29
|
|
|
30
30
|
## At a Glance
|
|
31
31
|
|
|
@@ -47,16 +47,29 @@ _Use the `diff` command against another run artifact to classify regressions and
|
|
|
47
47
|
|
|
48
48
|
| Focus | Check | Status | Duration (ms) | Message |
|
|
49
49
|
| --- | --- | --- | --- | --- |
|
|
50
|
-
| healthy |
|
|
51
|
-
| healthy |
|
|
52
|
-
| healthy |
|
|
53
|
-
| healthy |
|
|
50
|
+
| healthy | attack-sim | pass | 0.51 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
|
|
51
|
+
| healthy | conformance | pass | 1.57 | All 7 conformance checks passed. |
|
|
52
|
+
| healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
|
|
53
|
+
| healthy | schema-quality | pass | 0.37 | All 12 item(s) have good schema quality. |
|
|
54
|
+
| healthy | security | pass | 0.15 | No security issues detected. |
|
|
54
55
|
| healthy | security-lite | pass | 0.03 | No security issues detected (lightweight scan). |
|
|
55
|
-
| healthy | tools | pass | 0.
|
|
56
|
+
| healthy | tools | pass | 0.82 | Advertised capability responded with the minimal expected shape (12 items). |
|
|
56
57
|
| confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
|
|
57
58
|
|
|
58
59
|
## Evidence Snippets
|
|
59
60
|
|
|
61
|
+
### attack-sim — pass
|
|
62
|
+
|
|
63
|
+
Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
|
|
64
|
+
|
|
65
|
+
- Endpoint: `attack-sim/safe`
|
|
66
|
+
- Advertised: `true`
|
|
67
|
+
- Responded: `true`
|
|
68
|
+
- Minimal shape present: `true`
|
|
69
|
+
- Item count: `0`
|
|
70
|
+
- Identifiers: none
|
|
71
|
+
- Diagnostics: none
|
|
72
|
+
|
|
60
73
|
### conformance — pass
|
|
61
74
|
|
|
62
75
|
Summary: All 7 conformance checks passed.
|
|
@@ -159,5 +172,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
|
159
172
|
|
|
160
173
|
- Artifact type: `run`
|
|
161
174
|
- Schema version: `1.0.0`
|
|
162
|
-
- Run ID: `run_2026-07-
|
|
175
|
+
- Run ID: `run_2026-07-06T194954693Z_39638a36`
|
|
163
176
|
- Gate: `pass`
|