@kryptosai/mcp-observatory 1.32.0 → 1.33.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (408) hide show
  1. package/README.md +9 -13
  2. package/README.zh-CN.md +4 -10
  3. package/dist/src/adapters/base.d.ts +14 -0
  4. package/dist/src/adapters/base.js +2 -0
  5. package/dist/src/adapters/base.js.map +1 -0
  6. package/dist/src/checks/semantics.d.ts +2 -0
  7. package/dist/src/checks/semantics.js +48 -0
  8. package/dist/src/checks/semantics.js.map +1 -0
  9. package/dist/src/cli.js +8 -2
  10. package/dist/src/cli.js.map +1 -1
  11. package/dist/src/commands/audit.js +7 -1
  12. package/dist/src/commands/audit.js.map +1 -1
  13. package/dist/src/commands/enforce.d.ts +2 -2
  14. package/dist/src/commands/enforce.js +19 -11
  15. package/dist/src/commands/enforce.js.map +1 -1
  16. package/dist/src/commands/helpers.d.ts +2 -0
  17. package/dist/src/commands/helpers.js +8 -1
  18. package/dist/src/commands/helpers.js.map +1 -1
  19. package/dist/src/commands/scan.d.ts +14 -0
  20. package/dist/src/commands/scan.js +42 -3
  21. package/dist/src/commands/scan.js.map +1 -1
  22. package/dist/src/commands/score.js +22 -1
  23. package/dist/src/commands/score.js.map +1 -1
  24. package/dist/src/commands/skill-scan.js +5 -3
  25. package/dist/src/commands/skill-scan.js.map +1 -1
  26. package/dist/src/commands/test.d.ts +19 -0
  27. package/dist/src/commands/test.js +70 -4
  28. package/dist/src/commands/test.js.map +1 -1
  29. package/dist/src/commercial.js +2 -2
  30. package/dist/src/commercial.js.map +1 -1
  31. package/dist/src/diff/diff.d.ts +2 -0
  32. package/dist/src/diff/diff.js +81 -0
  33. package/dist/src/diff/diff.js.map +1 -0
  34. package/dist/src/reporters/json.d.ts +2 -0
  35. package/dist/src/reporters/json.js +4 -0
  36. package/dist/src/reporters/json.js.map +1 -0
  37. package/dist/src/runner/runner.d.ts +2 -0
  38. package/dist/src/runner/runner.js +135 -0
  39. package/dist/src/runner/runner.js.map +1 -0
  40. package/dist/src/storage/filesystem.d.ts +6 -0
  41. package/dist/src/storage/filesystem.js +21 -0
  42. package/dist/src/storage/filesystem.js.map +1 -0
  43. package/dist/src/telemetry.d.ts +25 -3
  44. package/dist/src/telemetry.js +84 -18
  45. package/dist/src/telemetry.js.map +1 -1
  46. package/dist/src/validate.js +5 -6
  47. package/dist/src/validate.js.map +1 -1
  48. package/docs/mcp-server-safety-index.md +317 -8
  49. package/docs/safety-index/artifacts/1link-mcp.json +66 -0
  50. package/docs/safety-index/artifacts/1link-mcp.md +106 -0
  51. package/docs/safety-index/artifacts/aadhaar-mcp.json +66 -0
  52. package/docs/safety-index/artifacts/aadhaar-mcp.md +106 -0
  53. package/docs/safety-index/artifacts/aikidosec-mcp-server.json +536 -0
  54. package/docs/safety-index/artifacts/aikidosec-mcp-server.md +203 -0
  55. package/docs/safety-index/artifacts/aiou-mcp.json +66 -0
  56. package/docs/safety-index/artifacts/aiou-mcp.md +106 -0
  57. package/docs/safety-index/artifacts/airtable-mcp-server.json +66 -0
  58. package/docs/safety-index/artifacts/airtable-mcp-server.md +106 -0
  59. package/docs/safety-index/artifacts/alpaca-server.json +66 -0
  60. package/docs/safety-index/artifacts/alpaca-server.md +106 -0
  61. package/docs/safety-index/artifacts/antv-chart-server.json +1454 -21
  62. package/docs/safety-index/artifacts/antv-chart-server.md +155 -9
  63. package/docs/safety-index/artifacts/apify-mcp-server.json +66 -0
  64. package/docs/safety-index/artifacts/apify-mcp-server.md +103 -0
  65. package/docs/safety-index/artifacts/apple-music-server.json +66 -0
  66. package/docs/safety-index/artifacts/apple-music-server.md +102 -0
  67. package/docs/safety-index/artifacts/appwrite-mcp.json +66 -0
  68. package/docs/safety-index/artifacts/appwrite-mcp.md +106 -0
  69. package/docs/safety-index/artifacts/aqi-india-mcp.json +66 -0
  70. package/docs/safety-index/artifacts/aqi-india-mcp.md +106 -0
  71. package/docs/safety-index/artifacts/argocd-mcp-server.json +66 -0
  72. package/docs/safety-index/artifacts/argocd-mcp-server.md +106 -0
  73. package/docs/safety-index/artifacts/arxiv-mcp-server.json +66 -0
  74. package/docs/safety-index/artifacts/arxiv-mcp-server.md +100 -0
  75. package/docs/safety-index/artifacts/aws-mcp-server.json +66 -0
  76. package/docs/safety-index/artifacts/aws-mcp-server.md +103 -0
  77. package/docs/safety-index/artifacts/azure-devops-mcp-server.json +66 -0
  78. package/docs/safety-index/artifacts/azure-devops-mcp-server.md +106 -0
  79. package/docs/safety-index/artifacts/azure-mcp-server.json +66 -0
  80. package/docs/safety-index/artifacts/azure-mcp-server.md +102 -0
  81. package/docs/safety-index/artifacts/bhuvan-mcp.json +66 -0
  82. package/docs/safety-index/artifacts/bhuvan-mcp.md +106 -0
  83. package/docs/safety-index/artifacts/brave-search-mcp-server-v2.json +66 -0
  84. package/docs/safety-index/artifacts/brave-search-mcp-server-v2.md +103 -0
  85. package/docs/safety-index/artifacts/brave-search-server.json +341 -0
  86. package/docs/safety-index/artifacts/brave-search-server.md +201 -0
  87. package/docs/safety-index/artifacts/browsermcp-server.json +83 -18
  88. package/docs/safety-index/artifacts/browsermcp-server.md +46 -12
  89. package/docs/safety-index/artifacts/cal-com-mcp.json +66 -0
  90. package/docs/safety-index/artifacts/cal-com-mcp.md +106 -0
  91. package/docs/safety-index/artifacts/canvas-server.json +66 -0
  92. package/docs/safety-index/artifacts/canvas-server.md +105 -0
  93. package/docs/safety-index/artifacts/caselaw-server.json +66 -0
  94. package/docs/safety-index/artifacts/caselaw-server.md +106 -0
  95. package/docs/safety-index/artifacts/chatwoot-mcp.json +66 -0
  96. package/docs/safety-index/artifacts/chatwoot-mcp.md +102 -0
  97. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +596 -25
  98. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +97 -15
  99. package/docs/safety-index/artifacts/circleci-server.json +1606 -0
  100. package/docs/safety-index/artifacts/circleci-server.md +243 -0
  101. package/docs/safety-index/artifacts/clarity-server.json +794 -0
  102. package/docs/safety-index/artifacts/clarity-server.md +201 -0
  103. package/docs/safety-index/artifacts/clay-server.json +66 -0
  104. package/docs/safety-index/artifacts/clay-server.md +106 -0
  105. package/docs/safety-index/artifacts/clickup-mcp-server.json +66 -0
  106. package/docs/safety-index/artifacts/clickup-mcp-server.md +106 -0
  107. package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.json +66 -0
  108. package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.md +102 -0
  109. package/docs/safety-index/artifacts/cloudflare-server.json +66 -0
  110. package/docs/safety-index/artifacts/cloudflare-server.md +106 -0
  111. package/docs/safety-index/artifacts/coinbase-cds-server.json +322 -0
  112. package/docs/safety-index/artifacts/coinbase-cds-server.md +201 -0
  113. package/docs/safety-index/artifacts/confluence-mcp-server.json +1727 -0
  114. package/docs/safety-index/artifacts/confluence-mcp-server.md +255 -0
  115. package/docs/safety-index/artifacts/context7-server.json +85 -18
  116. package/docs/safety-index/artifacts/context7-server.md +52 -11
  117. package/docs/safety-index/artifacts/contract-analysis-server.json +66 -0
  118. package/docs/safety-index/artifacts/contract-analysis-server.md +106 -0
  119. package/docs/safety-index/artifacts/cowin-mcp.json +66 -0
  120. package/docs/safety-index/artifacts/cowin-mcp.md +106 -0
  121. package/docs/safety-index/artifacts/currents-mcp-server.json +66 -0
  122. package/docs/safety-index/artifacts/currents-mcp-server.md +102 -0
  123. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +1565 -34
  124. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +178 -17
  125. package/docs/safety-index/artifacts/dalle-server.json +66 -0
  126. package/docs/safety-index/artifacts/dalle-server.md +104 -0
  127. package/docs/safety-index/artifacts/daraz-mcp.json +66 -0
  128. package/docs/safety-index/artifacts/daraz-mcp.md +106 -0
  129. package/docs/safety-index/artifacts/desktop-commander-mcp-server.json +2348 -0
  130. package/docs/safety-index/artifacts/desktop-commander-mcp-server.md +266 -0
  131. package/docs/safety-index/artifacts/digilocker-mcp.json +66 -0
  132. package/docs/safety-index/artifacts/digilocker-mcp.md +106 -0
  133. package/docs/safety-index/artifacts/discord-mcp-server.json +1297 -0
  134. package/docs/safety-index/artifacts/discord-mcp-server.md +169 -0
  135. package/docs/safety-index/artifacts/discord-mcp.json +1023 -0
  136. package/docs/safety-index/artifacts/discord-mcp.md +229 -0
  137. package/docs/safety-index/artifacts/docker-server.json +395 -0
  138. package/docs/safety-index/artifacts/docker-server.md +204 -0
  139. package/docs/safety-index/artifacts/dynamodb-mcp-server.json +66 -0
  140. package/docs/safety-index/artifacts/dynamodb-mcp-server.md +103 -0
  141. package/docs/safety-index/artifacts/dynatrace-mcp-server.json +66 -0
  142. package/docs/safety-index/artifacts/dynatrace-mcp-server.md +103 -0
  143. package/docs/safety-index/artifacts/easypaisa-mcp.json +553 -0
  144. package/docs/safety-index/artifacts/easypaisa-mcp.md +205 -0
  145. package/docs/safety-index/artifacts/ehsaas-mcp.json +66 -0
  146. package/docs/safety-index/artifacts/ehsaas-mcp.md +106 -0
  147. package/docs/safety-index/artifacts/epic-server.json +66 -0
  148. package/docs/safety-index/artifacts/epic-server.md +106 -0
  149. package/docs/safety-index/artifacts/eslint-mcp-server.json +320 -0
  150. package/docs/safety-index/artifacts/eslint-mcp-server.md +201 -0
  151. package/docs/safety-index/artifacts/espn-server.json +394 -0
  152. package/docs/safety-index/artifacts/espn-server.md +187 -0
  153. package/docs/safety-index/artifacts/everything-server.json +145 -18
  154. package/docs/safety-index/artifacts/everything-server.md +56 -11
  155. package/docs/safety-index/artifacts/exa-server.json +400 -0
  156. package/docs/safety-index/artifacts/exa-server.md +207 -0
  157. package/docs/safety-index/artifacts/executeautomation-playwright-server.json +625 -18
  158. package/docs/safety-index/artifacts/executeautomation-playwright-server.md +95 -11
  159. package/docs/safety-index/artifacts/fbr-mcp.json +66 -0
  160. package/docs/safety-index/artifacts/fbr-mcp.md +106 -0
  161. package/docs/safety-index/artifacts/fetch-server.json +66 -0
  162. package/docs/safety-index/artifacts/fetch-server.md +106 -0
  163. package/docs/safety-index/artifacts/fhir-server.json +66 -0
  164. package/docs/safety-index/artifacts/fhir-server.md +100 -0
  165. package/docs/safety-index/artifacts/figma-server.json +1766 -0
  166. package/docs/safety-index/artifacts/figma-server.md +256 -0
  167. package/docs/safety-index/artifacts/filesystem-mcp-server.json +427 -23
  168. package/docs/safety-index/artifacts/filesystem-mcp-server.md +75 -14
  169. package/docs/safety-index/artifacts/filesystem-server.json +426 -22
  170. package/docs/safety-index/artifacts/filesystem-server.md +73 -12
  171. package/docs/safety-index/artifacts/firecrawl-server.json +4056 -0
  172. package/docs/safety-index/artifacts/firecrawl-server.md +243 -0
  173. package/docs/safety-index/artifacts/flight-server.json +66 -0
  174. package/docs/safety-index/artifacts/flight-server.md +106 -0
  175. package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.json +66 -0
  176. package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.md +106 -0
  177. package/docs/safety-index/artifacts/gcp-mcp-server.json +66 -0
  178. package/docs/safety-index/artifacts/gcp-mcp-server.md +103 -0
  179. package/docs/safety-index/artifacts/github-mcp-server.json +374 -21
  180. package/docs/safety-index/artifacts/github-mcp-server.md +71 -15
  181. package/docs/safety-index/artifacts/gitlab-server.json +229 -0
  182. package/docs/safety-index/artifacts/gitlab-server.md +753 -0
  183. package/docs/safety-index/artifacts/gmail-server.json +66 -0
  184. package/docs/safety-index/artifacts/gmail-server.md +106 -0
  185. package/docs/safety-index/artifacts/google-calendar-server.json +66 -0
  186. package/docs/safety-index/artifacts/google-calendar-server.md +106 -0
  187. package/docs/safety-index/artifacts/google-drive-server.json +66 -0
  188. package/docs/safety-index/artifacts/google-drive-server.md +106 -0
  189. package/docs/safety-index/artifacts/google-sheets-server.json +66 -0
  190. package/docs/safety-index/artifacts/google-sheets-server.md +106 -0
  191. package/docs/safety-index/artifacts/google-tasks-server.json +66 -0
  192. package/docs/safety-index/artifacts/google-tasks-server.md +106 -0
  193. package/docs/safety-index/artifacts/gst-mcp.json +66 -0
  194. package/docs/safety-index/artifacts/gst-mcp.md +106 -0
  195. package/docs/safety-index/artifacts/gupshup-mcp.json +66 -0
  196. package/docs/safety-index/artifacts/gupshup-mcp.md +106 -0
  197. package/docs/safety-index/artifacts/hasura-mcp.json +66 -0
  198. package/docs/safety-index/artifacts/hasura-mcp.md +106 -0
  199. package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.json +66 -0
  200. package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.md +106 -0
  201. package/docs/safety-index/artifacts/hec-pakistan-mcp.json +66 -0
  202. package/docs/safety-index/artifacts/hec-pakistan-mcp.md +106 -0
  203. package/docs/safety-index/artifacts/heroku-server.json +1502 -0
  204. package/docs/safety-index/artifacts/heroku-server.md +236 -0
  205. package/docs/safety-index/artifacts/homekit-server.json +66 -0
  206. package/docs/safety-index/artifacts/homekit-server.md +106 -0
  207. package/docs/safety-index/artifacts/hotel-booking-server.json +66 -0
  208. package/docs/safety-index/artifacts/hotel-booking-server.md +106 -0
  209. package/docs/safety-index/artifacts/hubspot-mcp-server.json +66 -0
  210. package/docs/safety-index/artifacts/hubspot-mcp-server.md +106 -0
  211. package/docs/safety-index/artifacts/huggingface-server.json +66 -0
  212. package/docs/safety-index/artifacts/huggingface-server.md +106 -0
  213. package/docs/safety-index/artifacts/indian-food-nutrition-mcp.json +663 -0
  214. package/docs/safety-index/artifacts/indian-food-nutrition-mcp.md +211 -0
  215. package/docs/safety-index/artifacts/irctc-mcp.json +66 -0
  216. package/docs/safety-index/artifacts/irctc-mcp.md +106 -0
  217. package/docs/safety-index/artifacts/jazz-mcp.json +66 -0
  218. package/docs/safety-index/artifacts/jazz-mcp.md +106 -0
  219. package/docs/safety-index/artifacts/jazzcash-mcp.json +66 -0
  220. package/docs/safety-index/artifacts/jazzcash-mcp.md +102 -0
  221. package/docs/safety-index/artifacts/jina-server.json +66 -0
  222. package/docs/safety-index/artifacts/jina-server.md +106 -0
  223. package/docs/safety-index/artifacts/jira-mcp-server.json +66 -0
  224. package/docs/safety-index/artifacts/jira-mcp-server.md +104 -0
  225. package/docs/safety-index/artifacts/k2-mcp.json +66 -0
  226. package/docs/safety-index/artifacts/k2-mcp.md +106 -0
  227. package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.json +67 -0
  228. package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.md +114 -0
  229. package/docs/safety-index/artifacts/khan-academy-server.json +66 -0
  230. package/docs/safety-index/artifacts/khan-academy-server.md +106 -0
  231. package/docs/safety-index/artifacts/kubernetes-server.json +1126 -29
  232. package/docs/safety-index/artifacts/kubernetes-server.md +141 -18
  233. package/docs/safety-index/artifacts/langfuse-mcp.json +66 -0
  234. package/docs/safety-index/artifacts/langfuse-mcp.md +106 -0
  235. package/docs/safety-index/artifacts/linear-server.json +1494 -0
  236. package/docs/safety-index/artifacts/linear-server.md +237 -0
  237. package/docs/safety-index/artifacts/mapmyindia-mcp.json +66 -0
  238. package/docs/safety-index/artifacts/mapmyindia-mcp.md +106 -0
  239. package/docs/safety-index/artifacts/memory-server.json +191 -18
  240. package/docs/safety-index/artifacts/memory-server.md +52 -10
  241. package/docs/safety-index/artifacts/minecraft-server.json +592 -0
  242. package/docs/safety-index/artifacts/minecraft-server.md +186 -0
  243. package/docs/safety-index/artifacts/mls-server.json +66 -0
  244. package/docs/safety-index/artifacts/mls-server.md +106 -0
  245. package/docs/safety-index/artifacts/mongodb-server.json +66 -0
  246. package/docs/safety-index/artifacts/mongodb-server.md +106 -0
  247. package/docs/safety-index/artifacts/mui-mcp-server.json +419 -0
  248. package/docs/safety-index/artifacts/mui-mcp-server.md +208 -0
  249. package/docs/safety-index/artifacts/mysql-mcp-server.json +66 -0
  250. package/docs/safety-index/artifacts/mysql-mcp-server.md +106 -0
  251. package/docs/safety-index/artifacts/nadra-mcp.json +66 -0
  252. package/docs/safety-index/artifacts/nadra-mcp.md +106 -0
  253. package/docs/safety-index/artifacts/neon-server.json +66 -0
  254. package/docs/safety-index/artifacts/neon-server.md +103 -0
  255. package/docs/safety-index/artifacts/notion-server.json +7151 -0
  256. package/docs/safety-index/artifacts/notion-server.md +236 -0
  257. package/docs/safety-index/artifacts/obsidian-mcp.json +66 -0
  258. package/docs/safety-index/artifacts/obsidian-mcp.md +106 -0
  259. package/docs/safety-index/artifacts/ola-maps-mcp.json +66 -0
  260. package/docs/safety-index/artifacts/ola-maps-mcp.md +106 -0
  261. package/docs/safety-index/artifacts/olx-pakistan-mcp.json +66 -0
  262. package/docs/safety-index/artifacts/olx-pakistan-mcp.md +106 -0
  263. package/docs/safety-index/artifacts/onesignal-server.json +66 -0
  264. package/docs/safety-index/artifacts/onesignal-server.md +106 -0
  265. package/docs/safety-index/artifacts/openai-mcp-server.json +66 -0
  266. package/docs/safety-index/artifacts/openai-mcp-server.md +106 -0
  267. package/docs/safety-index/artifacts/opentofu-server.json +30 -18
  268. package/docs/safety-index/artifacts/opentofu-server.md +27 -9
  269. package/docs/safety-index/artifacts/openweather-server.json +66 -0
  270. package/docs/safety-index/artifacts/openweather-server.md +106 -0
  271. package/docs/safety-index/artifacts/pakistan-cricket-mcp.json +66 -0
  272. package/docs/safety-index/artifacts/pakistan-cricket-mcp.md +106 -0
  273. package/docs/safety-index/artifacts/pakistan-post-mcp.json +66 -0
  274. package/docs/safety-index/artifacts/pakistan-post-mcp.md +106 -0
  275. package/docs/safety-index/artifacts/pakistan-weather-mcp.json +66 -0
  276. package/docs/safety-index/artifacts/pakistan-weather-mcp.md +106 -0
  277. package/docs/safety-index/artifacts/pakwheels-mcp.json +66 -0
  278. package/docs/safety-index/artifacts/pakwheels-mcp.md +106 -0
  279. package/docs/safety-index/artifacts/paytm-mcp.json +66 -0
  280. package/docs/safety-index/artifacts/paytm-mcp.md +106 -0
  281. package/docs/safety-index/artifacts/perplexity-mcp.json +66 -0
  282. package/docs/safety-index/artifacts/perplexity-mcp.md +106 -0
  283. package/docs/safety-index/artifacts/pims-mcp.json +66 -0
  284. package/docs/safety-index/artifacts/pims-mcp.md +106 -0
  285. package/docs/safety-index/artifacts/playwright-mcp-server.json +415 -24
  286. package/docs/safety-index/artifacts/playwright-mcp-server.md +84 -20
  287. package/docs/safety-index/artifacts/postgres-server.json +330 -0
  288. package/docs/safety-index/artifacts/postgres-server.md +208 -0
  289. package/docs/safety-index/artifacts/postman-india-region.json +66 -0
  290. package/docs/safety-index/artifacts/postman-india-region.md +102 -0
  291. package/docs/safety-index/artifacts/postman-mcp-server.json +66 -0
  292. package/docs/safety-index/artifacts/postman-mcp-server.md +102 -0
  293. package/docs/safety-index/artifacts/promptopia-server.json +95 -18
  294. package/docs/safety-index/artifacts/promptopia-server.md +44 -10
  295. package/docs/safety-index/artifacts/pubmed-mcp-server.json +58 -0
  296. package/docs/safety-index/artifacts/pubmed-mcp-server.md +96 -0
  297. package/docs/safety-index/artifacts/punjab-health-mcp.json +66 -0
  298. package/docs/safety-index/artifacts/punjab-health-mcp.md +106 -0
  299. package/docs/safety-index/artifacts/puppeteer-server.json +118 -29
  300. package/docs/safety-index/artifacts/puppeteer-server.md +62 -20
  301. package/docs/safety-index/artifacts/qase-server.json +7055 -0
  302. package/docs/safety-index/artifacts/qase-server.md +329 -0
  303. package/docs/safety-index/artifacts/qdrant-server.json +66 -0
  304. package/docs/safety-index/artifacts/qdrant-server.md +106 -0
  305. package/docs/safety-index/artifacts/raspberrypi-server.json +66 -0
  306. package/docs/safety-index/artifacts/raspberrypi-server.md +106 -0
  307. package/docs/safety-index/artifacts/razorpay-mcp.json +66 -0
  308. package/docs/safety-index/artifacts/razorpay-mcp.md +103 -0
  309. package/docs/safety-index/artifacts/reddit-server.json +66 -0
  310. package/docs/safety-index/artifacts/reddit-server.md +106 -0
  311. package/docs/safety-index/artifacts/redis-server.json +66 -0
  312. package/docs/safety-index/artifacts/redis-server.md +106 -0
  313. package/docs/safety-index/artifacts/ref-tools-server.json +95 -18
  314. package/docs/safety-index/artifacts/ref-tools-server.md +43 -10
  315. package/docs/safety-index/artifacts/resend-mcp.json +66 -0
  316. package/docs/safety-index/artifacts/resend-mcp.md +102 -0
  317. package/docs/safety-index/artifacts/rozgar-mcp.json +66 -0
  318. package/docs/safety-index/artifacts/rozgar-mcp.md +106 -0
  319. package/docs/safety-index/artifacts/s3-mcp-server.json +467 -0
  320. package/docs/safety-index/artifacts/s3-mcp-server.md +209 -0
  321. package/docs/safety-index/artifacts/salesforce-mcp-server.json +66 -0
  322. package/docs/safety-index/artifacts/salesforce-mcp-server.md +106 -0
  323. package/docs/safety-index/artifacts/sehat-sahulat-mcp.json +66 -0
  324. package/docs/safety-index/artifacts/sehat-sahulat-mcp.md +106 -0
  325. package/docs/safety-index/artifacts/sendgrid-mcp.json +66 -0
  326. package/docs/safety-index/artifacts/sendgrid-mcp.md +106 -0
  327. package/docs/safety-index/artifacts/sentry-server.json +66 -0
  328. package/docs/safety-index/artifacts/sentry-server.md +106 -0
  329. package/docs/safety-index/artifacts/sequential-thinking-server.json +59 -18
  330. package/docs/safety-index/artifacts/sequential-thinking-server.md +40 -8
  331. package/docs/safety-index/artifacts/shopify-mcp-server.json +66 -0
  332. package/docs/safety-index/artifacts/shopify-mcp-server.md +106 -0
  333. package/docs/safety-index/artifacts/shopify-mcp.json +66 -0
  334. package/docs/safety-index/artifacts/shopify-mcp.md +106 -0
  335. package/docs/safety-index/artifacts/shortcut-mcp-server.json +66 -0
  336. package/docs/safety-index/artifacts/shortcut-mcp-server.md +102 -0
  337. package/docs/safety-index/artifacts/slack-server.json +66 -0
  338. package/docs/safety-index/artifacts/slack-server.md +102 -0
  339. package/docs/safety-index/artifacts/smartbear-mcp-server.json +21483 -0
  340. package/docs/safety-index/artifacts/smartbear-mcp-server.md +900 -0
  341. package/docs/safety-index/artifacts/spotify-mcp.json +2071 -0
  342. package/docs/safety-index/artifacts/spotify-mcp.md +237 -0
  343. package/docs/safety-index/artifacts/spotify-server.json +66 -0
  344. package/docs/safety-index/artifacts/spotify-server.md +106 -0
  345. package/docs/safety-index/artifacts/sqlite-server.json +67 -0
  346. package/docs/safety-index/artifacts/sqlite-server.md +106 -0
  347. package/docs/safety-index/artifacts/stable-diffusion-server.json +66 -0
  348. package/docs/safety-index/artifacts/stable-diffusion-server.md +106 -0
  349. package/docs/safety-index/artifacts/stock-nse-india.json +66 -0
  350. package/docs/safety-index/artifacts/stock-nse-india.md +106 -0
  351. package/docs/safety-index/artifacts/storybook-mcp-server.json +66 -0
  352. package/docs/safety-index/artifacts/storybook-mcp-server.md +103 -0
  353. package/docs/safety-index/artifacts/stripe-server.json +66 -0
  354. package/docs/safety-index/artifacts/stripe-server.md +106 -0
  355. package/docs/safety-index/artifacts/supabase-server.json +66 -0
  356. package/docs/safety-index/artifacts/supabase-server.md +102 -0
  357. package/docs/safety-index/artifacts/tavily-search-server.json +66 -0
  358. package/docs/safety-index/artifacts/tavily-search-server.md +106 -0
  359. package/docs/safety-index/artifacts/telegram-mcp-server.json +66 -0
  360. package/docs/safety-index/artifacts/telegram-mcp-server.md +103 -0
  361. package/docs/safety-index/artifacts/telenor-pakistan-mcp.json +66 -0
  362. package/docs/safety-index/artifacts/telenor-pakistan-mcp.md +106 -0
  363. package/docs/safety-index/artifacts/textlocal-mcp.json +66 -0
  364. package/docs/safety-index/artifacts/textlocal-mcp.md +106 -0
  365. package/docs/safety-index/artifacts/tooljet-mcp.json +66 -0
  366. package/docs/safety-index/artifacts/tooljet-mcp.md +106 -0
  367. package/docs/safety-index/artifacts/transcend-server.json +3438 -0
  368. package/docs/safety-index/artifacts/transcend-server.md +277 -0
  369. package/docs/safety-index/artifacts/trello-mcp-server.json +916 -0
  370. package/docs/safety-index/artifacts/trello-mcp-server.md +211 -0
  371. package/docs/safety-index/artifacts/twilio-mcp.json +66 -0
  372. package/docs/safety-index/artifacts/twilio-mcp.md +106 -0
  373. package/docs/safety-index/artifacts/udyam-mcp.json +66 -0
  374. package/docs/safety-index/artifacts/udyam-mcp.md +106 -0
  375. package/docs/safety-index/artifacts/ufone-mcp.json +66 -0
  376. package/docs/safety-index/artifacts/ufone-mcp.md +106 -0
  377. package/docs/safety-index/artifacts/ui5-mcp-server.json +24 -24
  378. package/docs/safety-index/artifacts/ui5-mcp-server.md +13 -13
  379. package/docs/safety-index/artifacts/unity-server.json +66 -0
  380. package/docs/safety-index/artifacts/unity-server.md +102 -0
  381. package/docs/safety-index/artifacts/upi-mcp.json +452 -0
  382. package/docs/safety-index/artifacts/upi-mcp.md +201 -0
  383. package/docs/safety-index/artifacts/vercel-ai-server.json +66 -0
  384. package/docs/safety-index/artifacts/vercel-ai-server.md +106 -0
  385. package/docs/safety-index/artifacts/vimeo-server.json +66 -0
  386. package/docs/safety-index/artifacts/vimeo-server.md +106 -0
  387. package/docs/safety-index/artifacts/weather-server.json +66 -0
  388. package/docs/safety-index/artifacts/weather-server.md +106 -0
  389. package/docs/safety-index/artifacts/whatsapp-business-mcp.json +66 -0
  390. package/docs/safety-index/artifacts/whatsapp-business-mcp.md +106 -0
  391. package/docs/safety-index/artifacts/whatsapp-mcp-server.json +66 -0
  392. package/docs/safety-index/artifacts/whatsapp-mcp-server.md +106 -0
  393. package/docs/safety-index/artifacts/whatsapp-mcp.json +66 -0
  394. package/docs/safety-index/artifacts/whatsapp-mcp.md +106 -0
  395. package/docs/safety-index/artifacts/yahoo-finance-server.json +626 -0
  396. package/docs/safety-index/artifacts/yahoo-finance-server.md +187 -0
  397. package/docs/safety-index/artifacts/youtube-mcp-server.json +58 -0
  398. package/docs/safety-index/artifacts/youtube-mcp-server.md +96 -0
  399. package/docs/safety-index/artifacts/youtube-server.json +66 -0
  400. package/docs/safety-index/artifacts/youtube-server.md +103 -0
  401. package/docs/safety-index/artifacts/zendesk-mcp.json +66 -0
  402. package/docs/safety-index/artifacts/zendesk-mcp.md +106 -0
  403. package/docs/safety-index/artifacts/zillow-server.json +66 -0
  404. package/docs/safety-index/artifacts/zillow-server.md +102 -0
  405. package/docs/safety-index/artifacts/zong-mcp.json +66 -0
  406. package/docs/safety-index/artifacts/zong-mcp.md +106 -0
  407. package/docs/safety-index/targets.json +2663 -3
  408. package/package.json +10 -9
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-08T21:35:18.919Z
3
+ Generated at 2026-07-15T22:33:24.164Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -8,8 +8,8 @@ Generated at 2026-07-08T21:35:18.919Z
8
8
  - Adapter: `local-process`
9
9
  - Command: `npx -y @modelcontextprotocol/server-github`
10
10
  - Server: `github-mcp-server 0.6.2`
11
- - Platform: `win32 10.0.26200`
12
- - Node: `v24.15.0`
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
13
 
14
14
  ## Executive Summary
15
15
 
@@ -25,20 +25,63 @@ Generated at 2026-07-08T21:35:18.919Z
25
25
 
26
26
  | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
27
27
  | --- | --- | --- | --- | --- | --- | --- | --- |
28
- | pass | 8 | 2 | 0 | 4 | 2 | 0 | 0 |
28
+ | pass | 9 | 2 | 0 | 5 | 2 | 0 | 0 |
29
29
 
30
30
  ## At a Glance
31
31
 
32
32
  - Safety verdict: **Needs review** — The server is usable, but caveated checks should be reviewed before agents depend on it.
33
- - Top risks: attack-sim: Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low.; schema-quality: Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info.; security: Found 1 security finding(s): 0 high, 1 medium, 0 low.
33
+ - Top risks: attack-sim: Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low.; runtime-profile: Detected 0 potential egress target(s) and 27 potential state mutation(s) with high confidence.; schema-quality: Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info.
34
34
  - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
35
35
  - Failing checks: none
36
- - Partial or flaky checks: security-lite, schema-quality, security, attack-sim
36
+ - Partial or flaky checks: security-lite, runtime-profile, schema-quality, security, attack-sim
37
37
  - Skipped checks: none
38
38
  - Unsupported checks: prompts, resources
39
- - Suggested next step: Review the caveated checks next: security-lite, schema-quality, security, attack-sim.
39
+ - Suggested next step: Review the caveated checks next: security-lite, runtime-profile, schema-quality, security, attack-sim.
40
40
  - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
41
41
 
42
+ ## What Was Not Tested
43
+
44
+ - ℹ️ credential_access: Credential scanning was performed (see security findings)
45
+ - ℹ️ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
46
+
47
+ ## Runtime Profile
48
+
49
+ ### State Mutations
50
+
51
+ The following state-modifying operations were identified from tool schemas:
52
+
53
+ | Resource | Operation | Scope | Source |
54
+ | --- | --- | --- | --- |
55
+ | filesystem | write | working_directory | tool_schema |
56
+ | filesystem | write | working_directory | description_analysis |
57
+ | filesystem | write | working_directory | description_analysis |
58
+ | filesystem | write | working_directory | description_analysis |
59
+ | filesystem | write | working_directory | description_analysis |
60
+ | filesystem | write | working_directory | description_analysis |
61
+ | filesystem | write | working_directory | description_analysis |
62
+ | filesystem | write | working_directory | description_analysis |
63
+ | filesystem | write | working_directory | description_analysis |
64
+ | filesystem | write | working_directory | tool_schema |
65
+ | filesystem | write | working_directory | description_analysis |
66
+ | filesystem | write | working_directory | description_analysis |
67
+ | filesystem | write | working_directory | description_analysis |
68
+ | filesystem | write | working_directory | description_analysis |
69
+ | filesystem | write | working_directory | description_analysis |
70
+ | filesystem | write | working_directory | description_analysis |
71
+ | filesystem | write | working_directory | description_analysis |
72
+ | filesystem | write | working_directory | description_analysis |
73
+ | filesystem | write | working_directory | description_analysis |
74
+ | filesystem | write | working_directory | description_analysis |
75
+ | filesystem | write | working_directory | description_analysis |
76
+ | filesystem | write | working_directory | description_analysis |
77
+ | filesystem | write | working_directory | description_analysis |
78
+ | filesystem | write | working_directory | description_analysis |
79
+ | filesystem | write | working_directory | description_analysis |
80
+ | filesystem | write | working_directory | description_analysis |
81
+ | filesystem | write | working_directory | description_analysis |
82
+
83
+ _Analyzed at 2026-07-15T22:33:24.895Z_
84
+
42
85
  ## Regressions and Recoveries
43
86
 
44
87
  _Use the `diff` command against another run artifact to classify regressions and recoveries over time._
@@ -47,14 +90,15 @@ _Use the `diff` command against another run artifact to classify regressions and
47
90
 
48
91
  | Focus | Check | Status | Duration (ms) | Message |
49
92
  | --- | --- | --- | --- | --- |
50
- | healthy | conformance | pass | 3.17 | All 7 conformance checks passed. |
51
- | healthy | tools | pass | 4.37 | Advertised capability responded with the minimal expected shape (26 items). |
52
- | review | attack-sim | partial | 2.75 | Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low. |
53
- | review | schema-quality | partial | 1.84 | Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info. |
54
- | review | security | partial | 2.66 | Found 1 security finding(s): 0 high, 1 medium, 0 low. |
55
- | review | security-lite | partial | 0.13 | Found 1 security finding(s): 0 high, 1 medium, 0 low. |
93
+ | healthy | conformance | pass | 1.40 | All 7 conformance checks passed. |
94
+ | healthy | tools | pass | 3.22 | Advertised capability responded with the minimal expected shape (26 items). |
95
+ | review | attack-sim | partial | 1.01 | Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low. |
96
+ | review | runtime-profile | partial | 0.29 | Detected 0 potential egress target(s) and 27 potential state mutation(s) with high confidence. |
97
+ | review | schema-quality | partial | 0.82 | Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info. |
98
+ | review | security | partial | 0.77 | Found 1 security finding(s): 0 high, 1 medium, 0 low. |
99
+ | review | security-lite | partial | 0.06 | Found 1 security finding(s): 0 high, 1 medium, 0 low. |
56
100
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
57
- | confirm intent | resources | unsupported | 0.01 | Resources are not advertised by the target. |
101
+ | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
58
102
 
59
103
  ## Evidence Snippets
60
104
 
@@ -94,6 +138,18 @@ Summary: Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low.
94
138
  - Identifiers: create_or_update_file, create_issue, create_pull_request, update_issue, create_pull_request_review
95
139
  - Diagnostics: [medium] Tool "create_or_update_file" combines broad parameters (path) with destructive or non-read-only behavior., [medium] Tool "create_issue" combines broad parameters (body) with destructive or non-read-only behavior., [medium] Tool "create_pull_request" combines broad parameters (body) with destructive or non-read-only behavior. (+2 more)
96
140
 
141
+ ### runtime-profile — partial
142
+
143
+ Summary: Detected 0 potential egress target(s) and 27 potential state mutation(s) with high confidence.
144
+
145
+ - Endpoint: `runtime-profile/analyze`
146
+ - Advertised: `true`
147
+ - Responded: `true`
148
+ - Minimal shape present: `true`
149
+ - Item count: `27`
150
+ - Identifiers: none
151
+ - Diagnostics: Egress entries: 0, State mutations: 27, Confidence: high
152
+
97
153
  ### schema-quality — partial
98
154
 
99
155
  Summary: Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info.
@@ -165,5 +221,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
165
221
 
166
222
  - Artifact type: `run`
167
223
  - Schema version: `1.0.0`
168
- - Run ID: `run_2026-07-08T213518919Z_6d8ffd44`
224
+ - Run ID: `run_2026-07-15T223324164Z_9a89cc98`
169
225
  - Gate: `pass`
@@ -0,0 +1,229 @@
1
+ {
2
+ "artifactType": "run",
3
+ "schemaVersion": "1.0.0",
4
+ "gate": "fail",
5
+ "runId": "run_2026-07-15T223349920Z_3504d108",
6
+ "createdAt": "2026-07-15T22:33:49.920Z",
7
+ "toolVersion": "1.32.1",
8
+ "target": {
9
+ "targetId": "gitlab-server",
10
+ "adapter": "local-process",
11
+ "command": "npx",
12
+ "args": [
13
+ "-y",
14
+ "@modelcontextprotocol/server-gitlab"
15
+ ],
16
+ "cwd": ".",
17
+ "metadata": {
18
+ "package": "@modelcontextprotocol/server-gitlab",
19
+ "purpose": "mcp-safety-index",
20
+ "riskClass": "Repository mutation and CI control",
21
+ "failureClass": "Merge/CI pipeline boundary",
22
+ "whyItMatters": "GitLab MCP servers expose repository operations, merge requests, issues, and CI pipeline controls — high-stakes write access across repos."
23
+ },
24
+ "serverName": "gitlab-mcp-server",
25
+ "serverVersion": "0.5.1"
26
+ },
27
+ "environment": {
28
+ "platform": "darwin 25.5.0",
29
+ "nodeVersion": "v22.22.1"
30
+ },
31
+ "summary": {
32
+ "total": 7,
33
+ "pass": 3,
34
+ "fail": 1,
35
+ "partial": 1,
36
+ "unsupported": 2,
37
+ "flaky": 0,
38
+ "skipped": 0,
39
+ "gate": "fail"
40
+ },
41
+ "checks": [
42
+ {
43
+ "id": "tools",
44
+ "capability": "tools",
45
+ "status": "fail",
46
+ "durationMs": 1.895250000001397,
47
+ "message": "Advertised capability failed during tools/list: [\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 0,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 1,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 2,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 3,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 4,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 5,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 6,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 7,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 8,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n }\n]",
48
+ "evidence": [
49
+ {
50
+ "endpoint": "tools/list",
51
+ "advertised": true,
52
+ "responded": false,
53
+ "minimalShapePresent": false,
54
+ "diagnostics": [
55
+ "[\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 0,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 1,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 2,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 3,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 4,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 5,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 6,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 7,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 8,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n }\n]",
56
+ "GitLab MCP Server running on stdio"
57
+ ]
58
+ }
59
+ ]
60
+ },
61
+ {
62
+ "id": "prompts",
63
+ "capability": "prompts",
64
+ "status": "unsupported",
65
+ "durationMs": 0.0006659999999101274,
66
+ "message": "Prompts are not advertised by the target.",
67
+ "evidence": [
68
+ {
69
+ "endpoint": "prompts/list",
70
+ "advertised": false,
71
+ "responded": false,
72
+ "minimalShapePresent": false,
73
+ "diagnostics": []
74
+ }
75
+ ]
76
+ },
77
+ {
78
+ "id": "resources",
79
+ "capability": "resources",
80
+ "status": "unsupported",
81
+ "durationMs": 0.0004580000022542663,
82
+ "message": "Resources are not advertised by the target.",
83
+ "evidence": [
84
+ {
85
+ "endpoint": "resources/list | resources/templates/list",
86
+ "advertised": false,
87
+ "responded": false,
88
+ "minimalShapePresent": false,
89
+ "diagnostics": []
90
+ }
91
+ ]
92
+ },
93
+ {
94
+ "id": "conformance",
95
+ "capability": "conformance",
96
+ "status": "partial",
97
+ "durationMs": 0.5302920000031008,
98
+ "message": "5/7 conformance checks passed, 2 failed.",
99
+ "evidence": [
100
+ {
101
+ "endpoint": "conformance/check",
102
+ "advertised": true,
103
+ "responded": true,
104
+ "minimalShapePresent": false,
105
+ "itemCount": 7,
106
+ "identifiers": [
107
+ "tools-capability-match",
108
+ "tool-response-content"
109
+ ],
110
+ "diagnostics": [
111
+ "[pass] capabilities-present: Server returned capabilities object.",
112
+ "[pass] server-info: Server provided initialization info.",
113
+ "[FAIL] tools-capability-match: Advertised tools but tools/list failed: [\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 0,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 1,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 2,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 3,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 4,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 5,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 6,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 7,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 8,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n }\n]",
114
+ "[pass] prompts-capability-match: Prompts not advertised — endpoint check skipped.",
115
+ "[pass] resources-capability-match: Resources not advertised — endpoint check skipped.",
116
+ "[FAIL] tool-response-content: Tool response content check failed: [\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 0,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 1,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 2,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 3,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 4,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 5,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 6,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 7,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n },\n {\n \"code\": \"invalid_value\",\n \"values\": [\n \"object\"\n ],\n \"path\": [\n \"tools\",\n 8,\n \"inputSchema\",\n \"type\"\n ],\n \"message\": \"Invalid input: expected \\\"object\\\"\"\n }\n]",
117
+ "[pass] error-handling: Server returned proper error code -32601 for unknown method."
118
+ ]
119
+ }
120
+ ]
121
+ },
122
+ {
123
+ "id": "schema-quality",
124
+ "capability": "schema-quality",
125
+ "status": "pass",
126
+ "durationMs": 0.12754199999471894,
127
+ "message": "All 0 item(s) have good schema quality.",
128
+ "evidence": [
129
+ {
130
+ "endpoint": "schema-quality/scan",
131
+ "advertised": true,
132
+ "responded": true,
133
+ "minimalShapePresent": true,
134
+ "itemCount": 0,
135
+ "identifiers": []
136
+ }
137
+ ]
138
+ },
139
+ {
140
+ "id": "security",
141
+ "capability": "security",
142
+ "status": "pass",
143
+ "durationMs": 0.2620840000017779,
144
+ "message": "No security issues detected.",
145
+ "evidence": [
146
+ {
147
+ "endpoint": "security/scan",
148
+ "advertised": true,
149
+ "responded": true,
150
+ "minimalShapePresent": true,
151
+ "itemCount": 0
152
+ }
153
+ ]
154
+ },
155
+ {
156
+ "id": "attack-sim",
157
+ "capability": "attack-sim",
158
+ "status": "pass",
159
+ "durationMs": 0.21029099999577738,
160
+ "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
161
+ "evidence": [
162
+ {
163
+ "endpoint": "attack-sim/safe",
164
+ "advertised": true,
165
+ "responded": true,
166
+ "minimalShapePresent": true,
167
+ "itemCount": 0,
168
+ "identifiers": []
169
+ }
170
+ ]
171
+ }
172
+ ],
173
+ "healthScore": {
174
+ "overall": 75,
175
+ "grade": "C",
176
+ "dimensions": [
177
+ {
178
+ "name": "Protocol Compliance",
179
+ "weight": 0.3,
180
+ "score": 60,
181
+ "details": [
182
+ "conformance: partial (60/100)"
183
+ ]
184
+ },
185
+ {
186
+ "name": "Schema Quality",
187
+ "weight": 0.2,
188
+ "score": 100,
189
+ "details": [
190
+ "schema-quality: pass (100/100)"
191
+ ]
192
+ },
193
+ {
194
+ "name": "Security",
195
+ "weight": 0.2,
196
+ "score": 100,
197
+ "details": [
198
+ "security: pass (100/100)",
199
+ "attack-sim: pass (100/100)"
200
+ ]
201
+ },
202
+ {
203
+ "name": "Reliability",
204
+ "weight": 0.2,
205
+ "score": 33,
206
+ "details": [
207
+ "tools: fail (0/100)",
208
+ "prompts: unsupported (50/100)",
209
+ "resources: unsupported (50/100)"
210
+ ]
211
+ },
212
+ {
213
+ "name": "Performance",
214
+ "weight": 0.1,
215
+ "score": 100,
216
+ "details": [
217
+ "Connect: 802ms",
218
+ "p95 latency: 2ms (3 operations)"
219
+ ]
220
+ }
221
+ ]
222
+ },
223
+ "performanceMetrics": {
224
+ "connectMs": 801.9415840000001,
225
+ "toolsListMs": 1.895250000001397,
226
+ "promptsListMs": 0.0006659999999101274,
227
+ "resourcesListMs": 0.0004580000022542663
228
+ }
229
+ }