@kryptosai/mcp-observatory 1.32.1 â 1.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -3
- package/dist/src/adapters/base.d.ts +14 -0
- package/dist/src/adapters/base.js +2 -0
- package/dist/src/adapters/base.js.map +1 -0
- package/dist/src/checks/semantics.d.ts +2 -0
- package/dist/src/checks/semantics.js +48 -0
- package/dist/src/checks/semantics.js.map +1 -0
- package/dist/src/cli.js +7 -1
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/audit.js +7 -1
- package/dist/src/commands/audit.js.map +1 -1
- package/dist/src/commands/enforce.js +14 -3
- package/dist/src/commands/enforce.js.map +1 -1
- package/dist/src/commands/helpers.d.ts +2 -0
- package/dist/src/commands/helpers.js +8 -1
- package/dist/src/commands/helpers.js.map +1 -1
- package/dist/src/commands/scan.d.ts +14 -0
- package/dist/src/commands/scan.js +42 -3
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/score.js +22 -1
- package/dist/src/commands/score.js.map +1 -1
- package/dist/src/commands/skill-scan.js +5 -3
- package/dist/src/commands/skill-scan.js.map +1 -1
- package/dist/src/commands/test.d.ts +19 -0
- package/dist/src/commands/test.js +68 -2
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/commercial.js +2 -2
- package/dist/src/commercial.js.map +1 -1
- package/dist/src/diff/diff.d.ts +2 -0
- package/dist/src/diff/diff.js +81 -0
- package/dist/src/diff/diff.js.map +1 -0
- package/dist/src/reporters/json.d.ts +2 -0
- package/dist/src/reporters/json.js +4 -0
- package/dist/src/reporters/json.js.map +1 -0
- package/dist/src/runner/runner.d.ts +2 -0
- package/dist/src/runner/runner.js +135 -0
- package/dist/src/runner/runner.js.map +1 -0
- package/dist/src/storage/filesystem.d.ts +6 -0
- package/dist/src/storage/filesystem.js +21 -0
- package/dist/src/storage/filesystem.js.map +1 -0
- package/dist/src/telemetry.d.ts +25 -3
- package/dist/src/telemetry.js +84 -19
- package/dist/src/telemetry.js.map +1 -1
- package/docs/mcp-server-safety-index.md +255 -6
- package/docs/safety-index/artifacts/1link-mcp.json +66 -0
- package/docs/safety-index/artifacts/1link-mcp.md +106 -0
- package/docs/safety-index/artifacts/aadhaar-mcp.json +66 -0
- package/docs/safety-index/artifacts/aadhaar-mcp.md +106 -0
- package/docs/safety-index/artifacts/aikidosec-mcp-server.json +536 -0
- package/docs/safety-index/artifacts/aikidosec-mcp-server.md +203 -0
- package/docs/safety-index/artifacts/aiou-mcp.json +66 -0
- package/docs/safety-index/artifacts/aiou-mcp.md +106 -0
- package/docs/safety-index/artifacts/airtable-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/airtable-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/alpaca-server.json +66 -0
- package/docs/safety-index/artifacts/alpaca-server.md +106 -0
- package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
- package/docs/safety-index/artifacts/antv-chart-server.md +11 -11
- package/docs/safety-index/artifacts/apify-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/apify-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/apple-music-server.json +66 -0
- package/docs/safety-index/artifacts/apple-music-server.md +102 -0
- package/docs/safety-index/artifacts/appwrite-mcp.json +66 -0
- package/docs/safety-index/artifacts/appwrite-mcp.md +106 -0
- package/docs/safety-index/artifacts/aqi-india-mcp.json +66 -0
- package/docs/safety-index/artifacts/aqi-india-mcp.md +106 -0
- package/docs/safety-index/artifacts/argocd-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/argocd-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/arxiv-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/arxiv-mcp-server.md +100 -0
- package/docs/safety-index/artifacts/aws-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/aws-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/azure-devops-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/azure-devops-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/azure-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/azure-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/bhuvan-mcp.json +66 -0
- package/docs/safety-index/artifacts/bhuvan-mcp.md +106 -0
- package/docs/safety-index/artifacts/brave-search-mcp-server-v2.json +66 -0
- package/docs/safety-index/artifacts/brave-search-mcp-server-v2.md +103 -0
- package/docs/safety-index/artifacts/brave-search-server.json +18 -18
- package/docs/safety-index/artifacts/brave-search-server.md +6 -6
- package/docs/safety-index/artifacts/browsermcp-server.json +18 -18
- package/docs/safety-index/artifacts/browsermcp-server.md +10 -10
- package/docs/safety-index/artifacts/cal-com-mcp.json +66 -0
- package/docs/safety-index/artifacts/cal-com-mcp.md +106 -0
- package/docs/safety-index/artifacts/canvas-server.json +66 -0
- package/docs/safety-index/artifacts/canvas-server.md +105 -0
- package/docs/safety-index/artifacts/caselaw-server.json +66 -0
- package/docs/safety-index/artifacts/caselaw-server.md +106 -0
- package/docs/safety-index/artifacts/chatwoot-mcp.json +66 -0
- package/docs/safety-index/artifacts/chatwoot-mcp.md +102 -0
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +22 -22
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +11 -11
- package/docs/safety-index/artifacts/circleci-server.json +1606 -0
- package/docs/safety-index/artifacts/circleci-server.md +243 -0
- package/docs/safety-index/artifacts/clarity-server.json +794 -0
- package/docs/safety-index/artifacts/clarity-server.md +201 -0
- package/docs/safety-index/artifacts/clay-server.json +4 -4
- package/docs/safety-index/artifacts/clay-server.md +3 -3
- package/docs/safety-index/artifacts/clickup-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/clickup-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.json +66 -0
- package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.md +102 -0
- package/docs/safety-index/artifacts/cloudflare-server.json +4 -4
- package/docs/safety-index/artifacts/cloudflare-server.md +3 -3
- package/docs/safety-index/artifacts/coinbase-cds-server.json +322 -0
- package/docs/safety-index/artifacts/coinbase-cds-server.md +201 -0
- package/docs/safety-index/artifacts/confluence-mcp-server.json +1727 -0
- package/docs/safety-index/artifacts/confluence-mcp-server.md +255 -0
- package/docs/safety-index/artifacts/context7-server.json +18 -18
- package/docs/safety-index/artifacts/context7-server.md +12 -12
- package/docs/safety-index/artifacts/contract-analysis-server.json +66 -0
- package/docs/safety-index/artifacts/contract-analysis-server.md +106 -0
- package/docs/safety-index/artifacts/cowin-mcp.json +66 -0
- package/docs/safety-index/artifacts/cowin-mcp.md +106 -0
- package/docs/safety-index/artifacts/currents-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/currents-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +34 -34
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +15 -15
- package/docs/safety-index/artifacts/dalle-server.json +66 -0
- package/docs/safety-index/artifacts/dalle-server.md +104 -0
- package/docs/safety-index/artifacts/daraz-mcp.json +66 -0
- package/docs/safety-index/artifacts/daraz-mcp.md +106 -0
- package/docs/safety-index/artifacts/desktop-commander-mcp-server.json +2348 -0
- package/docs/safety-index/artifacts/desktop-commander-mcp-server.md +266 -0
- package/docs/safety-index/artifacts/digilocker-mcp.json +66 -0
- package/docs/safety-index/artifacts/digilocker-mcp.md +106 -0
- package/docs/safety-index/artifacts/discord-mcp-server.json +1297 -0
- package/docs/safety-index/artifacts/discord-mcp-server.md +169 -0
- package/docs/safety-index/artifacts/discord-mcp.json +1023 -0
- package/docs/safety-index/artifacts/discord-mcp.md +229 -0
- package/docs/safety-index/artifacts/docker-server.json +19 -19
- package/docs/safety-index/artifacts/docker-server.md +8 -8
- package/docs/safety-index/artifacts/dynamodb-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/dynamodb-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/dynatrace-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/dynatrace-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/easypaisa-mcp.json +553 -0
- package/docs/safety-index/artifacts/easypaisa-mcp.md +205 -0
- package/docs/safety-index/artifacts/ehsaas-mcp.json +66 -0
- package/docs/safety-index/artifacts/ehsaas-mcp.md +106 -0
- package/docs/safety-index/artifacts/epic-server.json +66 -0
- package/docs/safety-index/artifacts/epic-server.md +106 -0
- package/docs/safety-index/artifacts/eslint-mcp-server.json +320 -0
- package/docs/safety-index/artifacts/eslint-mcp-server.md +201 -0
- package/docs/safety-index/artifacts/espn-server.json +394 -0
- package/docs/safety-index/artifacts/espn-server.md +187 -0
- package/docs/safety-index/artifacts/everything-server.json +18 -18
- package/docs/safety-index/artifacts/everything-server.md +10 -10
- package/docs/safety-index/artifacts/exa-server.json +22 -22
- package/docs/safety-index/artifacts/exa-server.md +14 -14
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +18 -18
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +9 -9
- package/docs/safety-index/artifacts/fbr-mcp.json +66 -0
- package/docs/safety-index/artifacts/fbr-mcp.md +106 -0
- package/docs/safety-index/artifacts/fetch-server.json +4 -4
- package/docs/safety-index/artifacts/fetch-server.md +3 -3
- package/docs/safety-index/artifacts/fhir-server.json +66 -0
- package/docs/safety-index/artifacts/fhir-server.md +100 -0
- package/docs/safety-index/artifacts/figma-server.json +18 -18
- package/docs/safety-index/artifacts/figma-server.md +10 -10
- package/docs/safety-index/artifacts/filesystem-mcp-server.json +19 -19
- package/docs/safety-index/artifacts/filesystem-mcp-server.md +10 -10
- package/docs/safety-index/artifacts/filesystem-server.json +18 -18
- package/docs/safety-index/artifacts/filesystem-server.md +7 -7
- package/docs/safety-index/artifacts/firecrawl-server.json +18 -18
- package/docs/safety-index/artifacts/firecrawl-server.md +10 -10
- package/docs/safety-index/artifacts/flight-server.json +66 -0
- package/docs/safety-index/artifacts/flight-server.md +106 -0
- package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/gcp-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/gcp-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/github-mcp-server.json +18 -18
- package/docs/safety-index/artifacts/github-mcp-server.md +9 -9
- package/docs/safety-index/artifacts/gitlab-server.json +16 -16
- package/docs/safety-index/artifacts/gitlab-server.md +6 -6
- package/docs/safety-index/artifacts/gmail-server.json +4 -4
- package/docs/safety-index/artifacts/gmail-server.md +3 -3
- package/docs/safety-index/artifacts/google-calendar-server.json +4 -4
- package/docs/safety-index/artifacts/google-calendar-server.md +3 -3
- package/docs/safety-index/artifacts/google-drive-server.json +4 -4
- package/docs/safety-index/artifacts/google-drive-server.md +3 -3
- package/docs/safety-index/artifacts/google-sheets-server.json +4 -4
- package/docs/safety-index/artifacts/google-sheets-server.md +3 -3
- package/docs/safety-index/artifacts/google-tasks-server.json +4 -4
- package/docs/safety-index/artifacts/google-tasks-server.md +3 -3
- package/docs/safety-index/artifacts/gst-mcp.json +66 -0
- package/docs/safety-index/artifacts/gst-mcp.md +106 -0
- package/docs/safety-index/artifacts/gupshup-mcp.json +66 -0
- package/docs/safety-index/artifacts/gupshup-mcp.md +106 -0
- package/docs/safety-index/artifacts/hasura-mcp.json +66 -0
- package/docs/safety-index/artifacts/hasura-mcp.md +106 -0
- package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.json +66 -0
- package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.md +106 -0
- package/docs/safety-index/artifacts/hec-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/hec-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/heroku-server.json +1502 -0
- package/docs/safety-index/artifacts/heroku-server.md +236 -0
- package/docs/safety-index/artifacts/homekit-server.json +66 -0
- package/docs/safety-index/artifacts/homekit-server.md +106 -0
- package/docs/safety-index/artifacts/hotel-booking-server.json +66 -0
- package/docs/safety-index/artifacts/hotel-booking-server.md +106 -0
- package/docs/safety-index/artifacts/hubspot-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/hubspot-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/huggingface-server.json +4 -4
- package/docs/safety-index/artifacts/huggingface-server.md +3 -3
- package/docs/safety-index/artifacts/indian-food-nutrition-mcp.json +663 -0
- package/docs/safety-index/artifacts/indian-food-nutrition-mcp.md +211 -0
- package/docs/safety-index/artifacts/irctc-mcp.json +66 -0
- package/docs/safety-index/artifacts/irctc-mcp.md +106 -0
- package/docs/safety-index/artifacts/jazz-mcp.json +66 -0
- package/docs/safety-index/artifacts/jazz-mcp.md +106 -0
- package/docs/safety-index/artifacts/jazzcash-mcp.json +66 -0
- package/docs/safety-index/artifacts/jazzcash-mcp.md +102 -0
- package/docs/safety-index/artifacts/jina-server.json +4 -4
- package/docs/safety-index/artifacts/jina-server.md +3 -3
- package/docs/safety-index/artifacts/jira-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/jira-mcp-server.md +104 -0
- package/docs/safety-index/artifacts/k2-mcp.json +66 -0
- package/docs/safety-index/artifacts/k2-mcp.md +106 -0
- package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.json +67 -0
- package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.md +114 -0
- package/docs/safety-index/artifacts/khan-academy-server.json +66 -0
- package/docs/safety-index/artifacts/khan-academy-server.md +106 -0
- package/docs/safety-index/artifacts/kubernetes-server.json +103 -33
- package/docs/safety-index/artifacts/kubernetes-server.md +23 -19
- package/docs/safety-index/artifacts/langfuse-mcp.json +66 -0
- package/docs/safety-index/artifacts/langfuse-mcp.md +106 -0
- package/docs/safety-index/artifacts/linear-server.json +18 -18
- package/docs/safety-index/artifacts/linear-server.md +8 -8
- package/docs/safety-index/artifacts/mapmyindia-mcp.json +66 -0
- package/docs/safety-index/artifacts/mapmyindia-mcp.md +106 -0
- package/docs/safety-index/artifacts/memory-server.json +18 -18
- package/docs/safety-index/artifacts/memory-server.md +10 -10
- package/docs/safety-index/artifacts/minecraft-server.json +592 -0
- package/docs/safety-index/artifacts/minecraft-server.md +186 -0
- package/docs/safety-index/artifacts/mls-server.json +66 -0
- package/docs/safety-index/artifacts/mls-server.md +106 -0
- package/docs/safety-index/artifacts/mongodb-server.json +4 -4
- package/docs/safety-index/artifacts/mongodb-server.md +3 -3
- package/docs/safety-index/artifacts/mui-mcp-server.json +419 -0
- package/docs/safety-index/artifacts/mui-mcp-server.md +208 -0
- package/docs/safety-index/artifacts/mysql-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/mysql-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/nadra-mcp.json +66 -0
- package/docs/safety-index/artifacts/nadra-mcp.md +106 -0
- package/docs/safety-index/artifacts/neon-server.json +4 -4
- package/docs/safety-index/artifacts/neon-server.md +3 -3
- package/docs/safety-index/artifacts/notion-server.json +18 -18
- package/docs/safety-index/artifacts/notion-server.md +10 -10
- package/docs/safety-index/artifacts/obsidian-mcp.json +66 -0
- package/docs/safety-index/artifacts/obsidian-mcp.md +106 -0
- package/docs/safety-index/artifacts/ola-maps-mcp.json +66 -0
- package/docs/safety-index/artifacts/ola-maps-mcp.md +106 -0
- package/docs/safety-index/artifacts/olx-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/olx-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/onesignal-server.json +4 -4
- package/docs/safety-index/artifacts/onesignal-server.md +3 -3
- package/docs/safety-index/artifacts/openai-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/openai-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/opentofu-server.json +19 -19
- package/docs/safety-index/artifacts/opentofu-server.md +10 -10
- package/docs/safety-index/artifacts/openweather-server.json +66 -0
- package/docs/safety-index/artifacts/openweather-server.md +106 -0
- package/docs/safety-index/artifacts/pakistan-cricket-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-cricket-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakistan-post-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-post-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakistan-weather-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-weather-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakwheels-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakwheels-mcp.md +106 -0
- package/docs/safety-index/artifacts/paytm-mcp.json +66 -0
- package/docs/safety-index/artifacts/paytm-mcp.md +106 -0
- package/docs/safety-index/artifacts/perplexity-mcp.json +66 -0
- package/docs/safety-index/artifacts/perplexity-mcp.md +106 -0
- package/docs/safety-index/artifacts/pims-mcp.json +66 -0
- package/docs/safety-index/artifacts/pims-mcp.md +106 -0
- package/docs/safety-index/artifacts/playwright-mcp-server.json +18 -18
- package/docs/safety-index/artifacts/playwright-mcp-server.md +8 -8
- package/docs/safety-index/artifacts/postgres-server.json +19 -19
- package/docs/safety-index/artifacts/postgres-server.md +9 -9
- package/docs/safety-index/artifacts/postman-india-region.json +66 -0
- package/docs/safety-index/artifacts/postman-india-region.md +102 -0
- package/docs/safety-index/artifacts/postman-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/postman-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/promptopia-server.json +19 -19
- package/docs/safety-index/artifacts/promptopia-server.md +9 -9
- package/docs/safety-index/artifacts/pubmed-mcp-server.json +58 -0
- package/docs/safety-index/artifacts/pubmed-mcp-server.md +96 -0
- package/docs/safety-index/artifacts/punjab-health-mcp.json +66 -0
- package/docs/safety-index/artifacts/punjab-health-mcp.md +106 -0
- package/docs/safety-index/artifacts/puppeteer-server.json +18 -18
- package/docs/safety-index/artifacts/puppeteer-server.md +9 -9
- package/docs/safety-index/artifacts/qase-server.json +7055 -0
- package/docs/safety-index/artifacts/qase-server.md +329 -0
- package/docs/safety-index/artifacts/qdrant-server.json +4 -4
- package/docs/safety-index/artifacts/qdrant-server.md +3 -3
- package/docs/safety-index/artifacts/raspberrypi-server.json +66 -0
- package/docs/safety-index/artifacts/raspberrypi-server.md +106 -0
- package/docs/safety-index/artifacts/razorpay-mcp.json +66 -0
- package/docs/safety-index/artifacts/razorpay-mcp.md +103 -0
- package/docs/safety-index/artifacts/reddit-server.json +4 -4
- package/docs/safety-index/artifacts/reddit-server.md +3 -3
- package/docs/safety-index/artifacts/redis-server.json +66 -0
- package/docs/safety-index/artifacts/redis-server.md +106 -0
- package/docs/safety-index/artifacts/ref-tools-server.json +18 -18
- package/docs/safety-index/artifacts/ref-tools-server.md +10 -10
- package/docs/safety-index/artifacts/resend-mcp.json +66 -0
- package/docs/safety-index/artifacts/resend-mcp.md +102 -0
- package/docs/safety-index/artifacts/rozgar-mcp.json +66 -0
- package/docs/safety-index/artifacts/rozgar-mcp.md +106 -0
- package/docs/safety-index/artifacts/s3-mcp-server.json +467 -0
- package/docs/safety-index/artifacts/s3-mcp-server.md +209 -0
- package/docs/safety-index/artifacts/salesforce-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/salesforce-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/sehat-sahulat-mcp.json +66 -0
- package/docs/safety-index/artifacts/sehat-sahulat-mcp.md +106 -0
- package/docs/safety-index/artifacts/sendgrid-mcp.json +66 -0
- package/docs/safety-index/artifacts/sendgrid-mcp.md +106 -0
- package/docs/safety-index/artifacts/sentry-server.json +3 -3
- package/docs/safety-index/artifacts/sentry-server.md +2 -2
- package/docs/safety-index/artifacts/sequential-thinking-server.json +18 -18
- package/docs/safety-index/artifacts/sequential-thinking-server.md +8 -8
- package/docs/safety-index/artifacts/shopify-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/shopify-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/shopify-mcp.json +66 -0
- package/docs/safety-index/artifacts/shopify-mcp.md +106 -0
- package/docs/safety-index/artifacts/shortcut-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/shortcut-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/slack-server.json +3 -3
- package/docs/safety-index/artifacts/slack-server.md +2 -2
- package/docs/safety-index/artifacts/smartbear-mcp-server.json +21483 -0
- package/docs/safety-index/artifacts/smartbear-mcp-server.md +900 -0
- package/docs/safety-index/artifacts/spotify-mcp.json +2071 -0
- package/docs/safety-index/artifacts/spotify-mcp.md +237 -0
- package/docs/safety-index/artifacts/spotify-server.json +66 -0
- package/docs/safety-index/artifacts/spotify-server.md +106 -0
- package/docs/safety-index/artifacts/sqlite-server.json +4 -4
- package/docs/safety-index/artifacts/sqlite-server.md +3 -3
- package/docs/safety-index/artifacts/stable-diffusion-server.json +66 -0
- package/docs/safety-index/artifacts/stable-diffusion-server.md +106 -0
- package/docs/safety-index/artifacts/stock-nse-india.json +66 -0
- package/docs/safety-index/artifacts/stock-nse-india.md +106 -0
- package/docs/safety-index/artifacts/storybook-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/storybook-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/stripe-server.json +3 -3
- package/docs/safety-index/artifacts/stripe-server.md +2 -2
- package/docs/safety-index/artifacts/supabase-server.json +3 -3
- package/docs/safety-index/artifacts/supabase-server.md +2 -2
- package/docs/safety-index/artifacts/tavily-search-server.json +4 -4
- package/docs/safety-index/artifacts/tavily-search-server.md +3 -3
- package/docs/safety-index/artifacts/telegram-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/telegram-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/telenor-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/telenor-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/textlocal-mcp.json +66 -0
- package/docs/safety-index/artifacts/textlocal-mcp.md +106 -0
- package/docs/safety-index/artifacts/tooljet-mcp.json +66 -0
- package/docs/safety-index/artifacts/tooljet-mcp.md +106 -0
- package/docs/safety-index/artifacts/transcend-server.json +3438 -0
- package/docs/safety-index/artifacts/transcend-server.md +277 -0
- package/docs/safety-index/artifacts/trello-mcp-server.json +916 -0
- package/docs/safety-index/artifacts/trello-mcp-server.md +211 -0
- package/docs/safety-index/artifacts/twilio-mcp.json +66 -0
- package/docs/safety-index/artifacts/twilio-mcp.md +106 -0
- package/docs/safety-index/artifacts/udyam-mcp.json +66 -0
- package/docs/safety-index/artifacts/udyam-mcp.md +106 -0
- package/docs/safety-index/artifacts/ufone-mcp.json +66 -0
- package/docs/safety-index/artifacts/ufone-mcp.md +106 -0
- package/docs/safety-index/artifacts/ui5-mcp-server.json +21 -21
- package/docs/safety-index/artifacts/ui5-mcp-server.md +10 -10
- package/docs/safety-index/artifacts/unity-server.json +66 -0
- package/docs/safety-index/artifacts/unity-server.md +102 -0
- package/docs/safety-index/artifacts/upi-mcp.json +452 -0
- package/docs/safety-index/artifacts/upi-mcp.md +201 -0
- package/docs/safety-index/artifacts/vercel-ai-server.json +4 -4
- package/docs/safety-index/artifacts/vercel-ai-server.md +3 -3
- package/docs/safety-index/artifacts/vimeo-server.json +66 -0
- package/docs/safety-index/artifacts/vimeo-server.md +106 -0
- package/docs/safety-index/artifacts/weather-server.json +66 -0
- package/docs/safety-index/artifacts/weather-server.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-business-mcp.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-business-mcp.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-mcp.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-mcp.md +106 -0
- package/docs/safety-index/artifacts/yahoo-finance-server.json +626 -0
- package/docs/safety-index/artifacts/yahoo-finance-server.md +187 -0
- package/docs/safety-index/artifacts/youtube-mcp-server.json +58 -0
- package/docs/safety-index/artifacts/youtube-mcp-server.md +96 -0
- package/docs/safety-index/artifacts/youtube-server.json +66 -0
- package/docs/safety-index/artifacts/youtube-server.md +103 -0
- package/docs/safety-index/artifacts/zendesk-mcp.json +66 -0
- package/docs/safety-index/artifacts/zendesk-mcp.md +106 -0
- package/docs/safety-index/artifacts/zillow-server.json +66 -0
- package/docs/safety-index/artifacts/zillow-server.md +102 -0
- package/docs/safety-index/artifacts/zong-mcp.json +66 -0
- package/docs/safety-index/artifacts/zong-mcp.md +106 -0
- package/docs/safety-index/targets.json +2145 -20
- package/package.json +10 -9
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
"artifactType": "run",
|
|
3
3
|
"schemaVersion": "1.0.0",
|
|
4
4
|
"gate": "pass",
|
|
5
|
-
"runId": "run_2026-07-
|
|
6
|
-
"createdAt": "2026-07-
|
|
7
|
-
"toolVersion": "1.
|
|
5
|
+
"runId": "run_2026-07-15T223326328Z_03567000",
|
|
6
|
+
"createdAt": "2026-07-15T22:33:26.328Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
8
|
"target": {
|
|
9
9
|
"targetId": "opentofu-server",
|
|
10
10
|
"adapter": "local-process",
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
"id": "tools",
|
|
44
44
|
"capability": "tools",
|
|
45
45
|
"status": "pass",
|
|
46
|
-
"durationMs": 2.
|
|
46
|
+
"durationMs": 2.01104099999975,
|
|
47
47
|
"message": "Advertised capability responded with the minimal expected shape (5 items).",
|
|
48
48
|
"evidence": [
|
|
49
49
|
{
|
|
@@ -206,7 +206,7 @@
|
|
|
206
206
|
"id": "prompts",
|
|
207
207
|
"capability": "prompts",
|
|
208
208
|
"status": "unsupported",
|
|
209
|
-
"durationMs": 0.
|
|
209
|
+
"durationMs": 0.0011249999988649506,
|
|
210
210
|
"message": "Prompts are not advertised by the target.",
|
|
211
211
|
"evidence": [
|
|
212
212
|
{
|
|
@@ -222,7 +222,7 @@
|
|
|
222
222
|
"id": "resources",
|
|
223
223
|
"capability": "resources",
|
|
224
224
|
"status": "pass",
|
|
225
|
-
"durationMs": 0.
|
|
225
|
+
"durationMs": 0.6181660000002012,
|
|
226
226
|
"message": "Advertised capability responded with the minimal expected shape (1 items).",
|
|
227
227
|
"evidence": [
|
|
228
228
|
{
|
|
@@ -251,7 +251,7 @@
|
|
|
251
251
|
"id": "security-lite",
|
|
252
252
|
"capability": "security-lite",
|
|
253
253
|
"status": "pass",
|
|
254
|
-
"durationMs": 0.
|
|
254
|
+
"durationMs": 0.022874999998748535,
|
|
255
255
|
"message": "No security issues detected (lightweight scan).",
|
|
256
256
|
"evidence": [
|
|
257
257
|
{
|
|
@@ -267,7 +267,7 @@
|
|
|
267
267
|
"id": "runtime-profile",
|
|
268
268
|
"capability": "runtime-profile",
|
|
269
269
|
"status": "pass",
|
|
270
|
-
"durationMs": 0.
|
|
270
|
+
"durationMs": 0.0725830000010319,
|
|
271
271
|
"message": "No egress or state mutation indicators detected in tool schemas.",
|
|
272
272
|
"evidence": []
|
|
273
273
|
},
|
|
@@ -275,7 +275,7 @@
|
|
|
275
275
|
"id": "conformance",
|
|
276
276
|
"capability": "conformance",
|
|
277
277
|
"status": "pass",
|
|
278
|
-
"durationMs": 0.
|
|
278
|
+
"durationMs": 0.8321670000004815,
|
|
279
279
|
"message": "All 7 conformance checks passed.",
|
|
280
280
|
"evidence": [
|
|
281
281
|
{
|
|
@@ -301,7 +301,7 @@
|
|
|
301
301
|
"id": "schema-quality",
|
|
302
302
|
"capability": "schema-quality",
|
|
303
303
|
"status": "partial",
|
|
304
|
-
"durationMs": 0.
|
|
304
|
+
"durationMs": 0.521374999998443,
|
|
305
305
|
"message": "Found 1 quality finding(s) across 6 item(s): 1 warnings, 0 info.",
|
|
306
306
|
"evidence": [
|
|
307
307
|
{
|
|
@@ -331,7 +331,7 @@
|
|
|
331
331
|
"id": "security",
|
|
332
332
|
"capability": "security",
|
|
333
333
|
"status": "pass",
|
|
334
|
-
"durationMs": 0.
|
|
334
|
+
"durationMs": 0.1625000000003638,
|
|
335
335
|
"message": "No security issues detected.",
|
|
336
336
|
"evidence": [
|
|
337
337
|
{
|
|
@@ -347,7 +347,7 @@
|
|
|
347
347
|
"id": "attack-sim",
|
|
348
348
|
"capability": "attack-sim",
|
|
349
349
|
"status": "pass",
|
|
350
|
-
"durationMs": 0.
|
|
350
|
+
"durationMs": 0.38645899999937683,
|
|
351
351
|
"message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
|
|
352
352
|
"evidence": [
|
|
353
353
|
{
|
|
@@ -406,20 +406,20 @@
|
|
|
406
406
|
"weight": 0.1,
|
|
407
407
|
"score": 100,
|
|
408
408
|
"details": [
|
|
409
|
-
"Connect:
|
|
410
|
-
"p95 latency:
|
|
409
|
+
"Connect: 909ms",
|
|
410
|
+
"p95 latency: 2ms (3 operations)"
|
|
411
411
|
]
|
|
412
412
|
}
|
|
413
413
|
]
|
|
414
414
|
},
|
|
415
415
|
"performanceMetrics": {
|
|
416
|
-
"connectMs":
|
|
417
|
-
"toolsListMs": 2.
|
|
418
|
-
"promptsListMs": 0.
|
|
419
|
-
"resourcesListMs": 0.
|
|
416
|
+
"connectMs": 908.9675829999996,
|
|
417
|
+
"toolsListMs": 2.01104099999975,
|
|
418
|
+
"promptsListMs": 0.0011249999988649506,
|
|
419
|
+
"resourcesListMs": 0.6181660000002012
|
|
420
420
|
},
|
|
421
421
|
"runtimeProfile": {
|
|
422
|
-
"analyzedAt": "2026-07-
|
|
422
|
+
"analyzedAt": "2026-07-15T22:33:27.240Z",
|
|
423
423
|
"confidence": "low"
|
|
424
424
|
}
|
|
425
425
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# MCP Observatory Run Report
|
|
2
2
|
|
|
3
|
-
Generated at 2026-07-
|
|
3
|
+
Generated at 2026-07-15T22:33:26.328Z
|
|
4
4
|
|
|
5
5
|
## Target and Environment Metadata
|
|
6
6
|
|
|
@@ -48,7 +48,7 @@ Generated at 2026-07-12T23:44:06.388Z
|
|
|
48
48
|
|
|
49
49
|
## Runtime Profile
|
|
50
50
|
|
|
51
|
-
_Analyzed at 2026-07-
|
|
51
|
+
_Analyzed at 2026-07-15T22:33:27.240Z_
|
|
52
52
|
|
|
53
53
|
## Regressions and Recoveries
|
|
54
54
|
|
|
@@ -58,14 +58,14 @@ _Use the `diff` command against another run artifact to classify regressions and
|
|
|
58
58
|
|
|
59
59
|
| Focus | Check | Status | Duration (ms) | Message |
|
|
60
60
|
| --- | --- | --- | --- | --- |
|
|
61
|
-
| healthy | attack-sim | pass | 0.
|
|
62
|
-
| healthy | conformance | pass | 0.
|
|
63
|
-
| healthy | resources | pass | 0.
|
|
64
|
-
| healthy | runtime-profile | pass | 0.
|
|
61
|
+
| healthy | attack-sim | pass | 0.39 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
|
|
62
|
+
| healthy | conformance | pass | 0.83 | All 7 conformance checks passed. |
|
|
63
|
+
| healthy | resources | pass | 0.62 | Advertised capability responded with the minimal expected shape (1 items). |
|
|
64
|
+
| healthy | runtime-profile | pass | 0.07 | No egress or state mutation indicators detected in tool schemas. |
|
|
65
65
|
| healthy | security | pass | 0.16 | No security issues detected. |
|
|
66
|
-
| healthy | security-lite | pass | 0.
|
|
67
|
-
| healthy | tools | pass | 2.
|
|
68
|
-
| review | schema-quality | partial | 0.
|
|
66
|
+
| healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
|
|
67
|
+
| healthy | tools | pass | 2.01 | Advertised capability responded with the minimal expected shape (5 items). |
|
|
68
|
+
| review | schema-quality | partial | 0.52 | Found 1 quality finding(s) across 6 item(s): 1 warnings, 0 info. |
|
|
69
69
|
| confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
|
|
70
70
|
|
|
71
71
|
## Evidence Snippets
|
|
@@ -190,5 +190,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
|
190
190
|
|
|
191
191
|
- Artifact type: `run`
|
|
192
192
|
- Schema version: `1.0.0`
|
|
193
|
-
- Run ID: `run_2026-07-
|
|
193
|
+
- Run ID: `run_2026-07-15T223326328Z_03567000`
|
|
194
194
|
- Gate: `pass`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223403943Z_468bc3ec",
|
|
6
|
+
"createdAt": "2026-07-15T22:34:03.943Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "openweather-server",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"openweather-mcp-server"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "openweather-mcp-server",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Weather data retrieval",
|
|
21
|
+
"failureClass": "Weather data boundary",
|
|
22
|
+
"whyItMatters": "OpenWeather MCP servers expose current conditions, forecasts, and alerts â agents using weather data need clear data source and timeliness boundaries."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `openweather-server`.\nCommand: npx -y openweather-mcp-server\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'openweather-mcp-server@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_34_04_019Z-debug-0.log"
|
|
66
|
+
}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
# MCP Observatory Run Report
|
|
2
|
+
|
|
3
|
+
Generated at 2026-07-15T22:34:03.943Z
|
|
4
|
+
|
|
5
|
+
## Target and Environment Metadata
|
|
6
|
+
|
|
7
|
+
- Target: `openweather-server`
|
|
8
|
+
- Adapter: `local-process`
|
|
9
|
+
- Command: `npx -y openweather-mcp-server`
|
|
10
|
+
- Server: `unknown `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
|
+
|
|
14
|
+
## Executive Summary
|
|
15
|
+
|
|
16
|
+
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
17
|
+
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
18
|
+
| fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
|
|
19
|
+
|
|
20
|
+
## At a Glance
|
|
21
|
+
|
|
22
|
+
- Safety verdict: **Blocked** â One or more checks can break agent dependence and should be fixed before production use.
|
|
23
|
+
- Top risks: startup: server failed to start
|
|
24
|
+
- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
|
|
25
|
+
- Failing checks: none
|
|
26
|
+
- Partial or flaky checks: none
|
|
27
|
+
- Skipped checks: tools, prompts, resources
|
|
28
|
+
- Unsupported checks: none
|
|
29
|
+
- Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
|
|
30
|
+
- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
|
|
31
|
+
|
|
32
|
+
## What Was Not Tested
|
|
33
|
+
|
|
34
|
+
- đ network_egress: No outbound network calls were attempted during scan
|
|
35
|
+
- đ filesystem_mutation: Filesystem write operations were not exercised
|
|
36
|
+
- đ credential_access: Credential scanning was not performed
|
|
37
|
+
- âšī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
|
|
38
|
+
|
|
39
|
+
## Regressions and Recoveries
|
|
40
|
+
|
|
41
|
+
_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
|
|
42
|
+
|
|
43
|
+
## Failure Diagnosis
|
|
44
|
+
|
|
45
|
+
```text
|
|
46
|
+
Could not establish a plain stdio MCP session for target `openweather-server`.
|
|
47
|
+
Command: npx -y openweather-mcp-server
|
|
48
|
+
Diagnosis: The process exited or detached before MCP initialization completed.
|
|
49
|
+
Raw error: MCP error -32000: Connection closed
|
|
50
|
+
Likely causes:
|
|
51
|
+
- The package may expect extra startup arguments or environment variables.
|
|
52
|
+
- The package may not behave like a plain local-process stdio target under this invocation.
|
|
53
|
+
- The server may be crashing immediately and only leaving clues on stderr.
|
|
54
|
+
Next steps:
|
|
55
|
+
- Run the command manually and look for usage output, auth prompts, or crash text.
|
|
56
|
+
- Check whether the package expects a different transport or an app-oriented startup flow.
|
|
57
|
+
- Use the recent stderr lines below before assuming this is a harness bug.
|
|
58
|
+
Recent stderr:
|
|
59
|
+
- npm error 404 'openweather-mcp-server@*' is not in this registry.
|
|
60
|
+
- npm error 404
|
|
61
|
+
- npm error 404 Note that you can also install from a
|
|
62
|
+
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_34_04_019Z-debug-0.log
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
## Full Capability Status Table
|
|
67
|
+
|
|
68
|
+
| Focus | Check | Status | Duration (ms) | Message |
|
|
69
|
+
| --- | --- | --- | --- | --- |
|
|
70
|
+
| inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
71
|
+
| inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
72
|
+
| inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
73
|
+
|
|
74
|
+
## Evidence Snippets
|
|
75
|
+
|
|
76
|
+
### prompts â skipped
|
|
77
|
+
|
|
78
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
79
|
+
|
|
80
|
+
_No evidence was captured._
|
|
81
|
+
|
|
82
|
+
### resources â skipped
|
|
83
|
+
|
|
84
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
85
|
+
|
|
86
|
+
_No evidence was captured._
|
|
87
|
+
|
|
88
|
+
### tools â skipped
|
|
89
|
+
|
|
90
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
91
|
+
|
|
92
|
+
_No evidence was captured._
|
|
93
|
+
|
|
94
|
+
## Reproduction Commands
|
|
95
|
+
|
|
96
|
+
```bash
|
|
97
|
+
npm run cli -- run --target <path-to-target-config.json>
|
|
98
|
+
npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
99
|
+
```
|
|
100
|
+
|
|
101
|
+
## Artifact Provenance
|
|
102
|
+
|
|
103
|
+
- Artifact type: `run`
|
|
104
|
+
- Schema version: `1.0.0`
|
|
105
|
+
- Run ID: `run_2026-07-15T223403943Z_468bc3ec`
|
|
106
|
+
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223559622Z_93ecbd1c",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:59.622Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "pakistan-cricket-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"pakistan-cricket-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "pakistan-cricket-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Cricket board API access",
|
|
21
|
+
"failureClass": "Match/player/statistics boundary",
|
|
22
|
+
"whyItMatters": "Cricket is a religion in Pakistan â the PCB manages the national team, domestic tournaments, and PSL franchise league. MCP servers accessing match data, player stats, and ticketing handle Pakistan's most culturally significant sports data."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `pakistan-cricket-mcp`.\nCommand: npx -y pakistan-cricket-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'pakistan-cricket-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_59_702Z-debug-0.log"
|
|
66
|
+
}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
# MCP Observatory Run Report
|
|
2
|
+
|
|
3
|
+
Generated at 2026-07-15T22:35:59.622Z
|
|
4
|
+
|
|
5
|
+
## Target and Environment Metadata
|
|
6
|
+
|
|
7
|
+
- Target: `pakistan-cricket-mcp`
|
|
8
|
+
- Adapter: `local-process`
|
|
9
|
+
- Command: `npx -y pakistan-cricket-mcp`
|
|
10
|
+
- Server: `unknown `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
|
+
|
|
14
|
+
## Executive Summary
|
|
15
|
+
|
|
16
|
+
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
17
|
+
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
18
|
+
| fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
|
|
19
|
+
|
|
20
|
+
## At a Glance
|
|
21
|
+
|
|
22
|
+
- Safety verdict: **Blocked** â One or more checks can break agent dependence and should be fixed before production use.
|
|
23
|
+
- Top risks: startup: server failed to start
|
|
24
|
+
- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
|
|
25
|
+
- Failing checks: none
|
|
26
|
+
- Partial or flaky checks: none
|
|
27
|
+
- Skipped checks: tools, prompts, resources
|
|
28
|
+
- Unsupported checks: none
|
|
29
|
+
- Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
|
|
30
|
+
- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
|
|
31
|
+
|
|
32
|
+
## What Was Not Tested
|
|
33
|
+
|
|
34
|
+
- đ network_egress: No outbound network calls were attempted during scan
|
|
35
|
+
- đ filesystem_mutation: Filesystem write operations were not exercised
|
|
36
|
+
- đ credential_access: Credential scanning was not performed
|
|
37
|
+
- âšī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
|
|
38
|
+
|
|
39
|
+
## Regressions and Recoveries
|
|
40
|
+
|
|
41
|
+
_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
|
|
42
|
+
|
|
43
|
+
## Failure Diagnosis
|
|
44
|
+
|
|
45
|
+
```text
|
|
46
|
+
Could not establish a plain stdio MCP session for target `pakistan-cricket-mcp`.
|
|
47
|
+
Command: npx -y pakistan-cricket-mcp
|
|
48
|
+
Diagnosis: The process exited or detached before MCP initialization completed.
|
|
49
|
+
Raw error: MCP error -32000: Connection closed
|
|
50
|
+
Likely causes:
|
|
51
|
+
- The package may expect extra startup arguments or environment variables.
|
|
52
|
+
- The package may not behave like a plain local-process stdio target under this invocation.
|
|
53
|
+
- The server may be crashing immediately and only leaving clues on stderr.
|
|
54
|
+
Next steps:
|
|
55
|
+
- Run the command manually and look for usage output, auth prompts, or crash text.
|
|
56
|
+
- Check whether the package expects a different transport or an app-oriented startup flow.
|
|
57
|
+
- Use the recent stderr lines below before assuming this is a harness bug.
|
|
58
|
+
Recent stderr:
|
|
59
|
+
- npm error 404 'pakistan-cricket-mcp@*' is not in this registry.
|
|
60
|
+
- npm error 404
|
|
61
|
+
- npm error 404 Note that you can also install from a
|
|
62
|
+
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_59_702Z-debug-0.log
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
## Full Capability Status Table
|
|
67
|
+
|
|
68
|
+
| Focus | Check | Status | Duration (ms) | Message |
|
|
69
|
+
| --- | --- | --- | --- | --- |
|
|
70
|
+
| inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
71
|
+
| inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
72
|
+
| inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
73
|
+
|
|
74
|
+
## Evidence Snippets
|
|
75
|
+
|
|
76
|
+
### prompts â skipped
|
|
77
|
+
|
|
78
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
79
|
+
|
|
80
|
+
_No evidence was captured._
|
|
81
|
+
|
|
82
|
+
### resources â skipped
|
|
83
|
+
|
|
84
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
85
|
+
|
|
86
|
+
_No evidence was captured._
|
|
87
|
+
|
|
88
|
+
### tools â skipped
|
|
89
|
+
|
|
90
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
91
|
+
|
|
92
|
+
_No evidence was captured._
|
|
93
|
+
|
|
94
|
+
## Reproduction Commands
|
|
95
|
+
|
|
96
|
+
```bash
|
|
97
|
+
npm run cli -- run --target <path-to-target-config.json>
|
|
98
|
+
npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
99
|
+
```
|
|
100
|
+
|
|
101
|
+
## Artifact Provenance
|
|
102
|
+
|
|
103
|
+
- Artifact type: `run`
|
|
104
|
+
- Schema version: `1.0.0`
|
|
105
|
+
- Run ID: `run_2026-07-15T223559622Z_93ecbd1c`
|
|
106
|
+
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223553117Z_18c2d067",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:53.117Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "pakistan-post-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"pakistan-post-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "pakistan-post-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Pakistani postal tracking and logistics API access",
|
|
21
|
+
"failureClass": "Tracking/delivery/geocode boundary",
|
|
22
|
+
"whyItMatters": "Pakistan Post operates 13K+ post offices across Pakistan, providing the backbone for e-commerce and rural logistics. MCP servers tracking shipments, validating addresses, and geocoding Pakistani locations handle nationally-critical delivery infrastructure."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `pakistan-post-mcp`.\nCommand: npx -y pakistan-post-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'pakistan-post-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_53_192Z-debug-0.log"
|
|
66
|
+
}
|