@kryptosai/mcp-observatory 1.32.1 â 1.34.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -122
- package/dist/src/auth.d.ts +22 -0
- package/dist/src/auth.js +140 -0
- package/dist/src/auth.js.map +1 -0
- package/dist/src/cli.js +55 -4
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/audit.js +7 -1
- package/dist/src/commands/audit.js.map +1 -1
- package/dist/src/commands/demo.d.ts +2 -0
- package/dist/src/commands/demo.js +247 -0
- package/dist/src/commands/demo.js.map +1 -0
- package/dist/src/commands/enforce.js +14 -3
- package/dist/src/commands/enforce.js.map +1 -1
- package/dist/src/commands/helpers.d.ts +13 -0
- package/dist/src/commands/helpers.js +34 -1
- package/dist/src/commands/helpers.js.map +1 -1
- package/dist/src/commands/init-ci.d.ts +1 -0
- package/dist/src/commands/init-ci.js +157 -10
- package/dist/src/commands/init-ci.js.map +1 -1
- package/dist/src/commands/receipt.js +13 -3
- package/dist/src/commands/receipt.js.map +1 -1
- package/dist/src/commands/scan.d.ts +14 -0
- package/dist/src/commands/scan.js +51 -3
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/score.js +22 -1
- package/dist/src/commands/score.js.map +1 -1
- package/dist/src/commands/setup-ci-conversion.js +4 -4
- package/dist/src/commands/setup-ci-conversion.js.map +1 -1
- package/dist/src/commands/skill-scan.js +5 -3
- package/dist/src/commands/skill-scan.js.map +1 -1
- package/dist/src/commands/test.d.ts +19 -0
- package/dist/src/commands/test.js +77 -3
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/commercial.d.ts +3 -0
- package/dist/src/commercial.js +14 -3
- package/dist/src/commercial.js.map +1 -1
- package/dist/src/index.d.ts +1 -1
- package/dist/src/index.js +1 -1
- package/dist/src/index.js.map +1 -1
- package/dist/src/receipt.d.ts +9 -0
- package/dist/src/receipt.js +24 -1
- package/dist/src/receipt.js.map +1 -1
- package/dist/src/telemetry.d.ts +25 -3
- package/dist/src/telemetry.js +88 -19
- package/dist/src/telemetry.js.map +1 -1
- package/dist/src/utils/failure-diagnosis.d.ts +7 -0
- package/dist/src/utils/failure-diagnosis.js +14 -0
- package/dist/src/utils/failure-diagnosis.js.map +1 -1
- package/docs/mcp-server-safety-index.md +255 -6
- package/docs/safety-index/artifacts/1link-mcp.json +66 -0
- package/docs/safety-index/artifacts/1link-mcp.md +106 -0
- package/docs/safety-index/artifacts/aadhaar-mcp.json +66 -0
- package/docs/safety-index/artifacts/aadhaar-mcp.md +106 -0
- package/docs/safety-index/artifacts/aikidosec-mcp-server.json +536 -0
- package/docs/safety-index/artifacts/aikidosec-mcp-server.md +203 -0
- package/docs/safety-index/artifacts/aiou-mcp.json +66 -0
- package/docs/safety-index/artifacts/aiou-mcp.md +106 -0
- package/docs/safety-index/artifacts/airtable-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/airtable-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/alpaca-server.json +66 -0
- package/docs/safety-index/artifacts/alpaca-server.md +106 -0
- package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
- package/docs/safety-index/artifacts/antv-chart-server.md +11 -11
- package/docs/safety-index/artifacts/apify-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/apify-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/apple-music-server.json +66 -0
- package/docs/safety-index/artifacts/apple-music-server.md +102 -0
- package/docs/safety-index/artifacts/appwrite-mcp.json +66 -0
- package/docs/safety-index/artifacts/appwrite-mcp.md +106 -0
- package/docs/safety-index/artifacts/aqi-india-mcp.json +66 -0
- package/docs/safety-index/artifacts/aqi-india-mcp.md +106 -0
- package/docs/safety-index/artifacts/argocd-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/argocd-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/arxiv-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/arxiv-mcp-server.md +100 -0
- package/docs/safety-index/artifacts/aws-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/aws-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/azure-devops-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/azure-devops-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/azure-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/azure-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/bhuvan-mcp.json +66 -0
- package/docs/safety-index/artifacts/bhuvan-mcp.md +106 -0
- package/docs/safety-index/artifacts/brave-search-mcp-server-v2.json +66 -0
- package/docs/safety-index/artifacts/brave-search-mcp-server-v2.md +103 -0
- package/docs/safety-index/artifacts/brave-search-server.json +18 -18
- package/docs/safety-index/artifacts/brave-search-server.md +6 -6
- package/docs/safety-index/artifacts/browsermcp-server.json +18 -18
- package/docs/safety-index/artifacts/browsermcp-server.md +9 -9
- package/docs/safety-index/artifacts/cal-com-mcp.json +66 -0
- package/docs/safety-index/artifacts/cal-com-mcp.md +106 -0
- package/docs/safety-index/artifacts/canvas-server.json +66 -0
- package/docs/safety-index/artifacts/canvas-server.md +105 -0
- package/docs/safety-index/artifacts/caselaw-server.json +66 -0
- package/docs/safety-index/artifacts/caselaw-server.md +106 -0
- package/docs/safety-index/artifacts/chatwoot-mcp.json +66 -0
- package/docs/safety-index/artifacts/chatwoot-mcp.md +102 -0
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +23 -23
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +12 -12
- package/docs/safety-index/artifacts/circleci-server.json +1606 -0
- package/docs/safety-index/artifacts/circleci-server.md +243 -0
- package/docs/safety-index/artifacts/clarity-server.json +794 -0
- package/docs/safety-index/artifacts/clarity-server.md +201 -0
- package/docs/safety-index/artifacts/clay-server.json +4 -4
- package/docs/safety-index/artifacts/clay-server.md +3 -3
- package/docs/safety-index/artifacts/clickup-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/clickup-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.json +66 -0
- package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.md +102 -0
- package/docs/safety-index/artifacts/cloudflare-server.json +4 -4
- package/docs/safety-index/artifacts/cloudflare-server.md +4 -4
- package/docs/safety-index/artifacts/coinbase-cds-server.json +322 -0
- package/docs/safety-index/artifacts/coinbase-cds-server.md +201 -0
- package/docs/safety-index/artifacts/confluence-mcp-server.json +1727 -0
- package/docs/safety-index/artifacts/confluence-mcp-server.md +255 -0
- package/docs/safety-index/artifacts/context7-server.json +18 -18
- package/docs/safety-index/artifacts/context7-server.md +12 -12
- package/docs/safety-index/artifacts/contract-analysis-server.json +66 -0
- package/docs/safety-index/artifacts/contract-analysis-server.md +106 -0
- package/docs/safety-index/artifacts/cowin-mcp.json +66 -0
- package/docs/safety-index/artifacts/cowin-mcp.md +106 -0
- package/docs/safety-index/artifacts/currents-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/currents-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +34 -34
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +15 -15
- package/docs/safety-index/artifacts/dalle-server.json +66 -0
- package/docs/safety-index/artifacts/dalle-server.md +104 -0
- package/docs/safety-index/artifacts/daraz-mcp.json +66 -0
- package/docs/safety-index/artifacts/daraz-mcp.md +106 -0
- package/docs/safety-index/artifacts/desktop-commander-mcp-server.json +2348 -0
- package/docs/safety-index/artifacts/desktop-commander-mcp-server.md +266 -0
- package/docs/safety-index/artifacts/digilocker-mcp.json +66 -0
- package/docs/safety-index/artifacts/digilocker-mcp.md +106 -0
- package/docs/safety-index/artifacts/discord-mcp-server.json +1297 -0
- package/docs/safety-index/artifacts/discord-mcp-server.md +169 -0
- package/docs/safety-index/artifacts/discord-mcp.json +1023 -0
- package/docs/safety-index/artifacts/discord-mcp.md +229 -0
- package/docs/safety-index/artifacts/docker-server.json +19 -19
- package/docs/safety-index/artifacts/docker-server.md +8 -8
- package/docs/safety-index/artifacts/dynamodb-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/dynamodb-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/dynatrace-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/dynatrace-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/easypaisa-mcp.json +553 -0
- package/docs/safety-index/artifacts/easypaisa-mcp.md +205 -0
- package/docs/safety-index/artifacts/ehsaas-mcp.json +66 -0
- package/docs/safety-index/artifacts/ehsaas-mcp.md +106 -0
- package/docs/safety-index/artifacts/epic-server.json +66 -0
- package/docs/safety-index/artifacts/epic-server.md +106 -0
- package/docs/safety-index/artifacts/eslint-mcp-server.json +320 -0
- package/docs/safety-index/artifacts/eslint-mcp-server.md +201 -0
- package/docs/safety-index/artifacts/espn-server.json +394 -0
- package/docs/safety-index/artifacts/espn-server.md +187 -0
- package/docs/safety-index/artifacts/everything-server.json +18 -18
- package/docs/safety-index/artifacts/everything-server.md +12 -12
- package/docs/safety-index/artifacts/exa-server.json +22 -22
- package/docs/safety-index/artifacts/exa-server.md +14 -14
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +19 -19
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +11 -11
- package/docs/safety-index/artifacts/fbr-mcp.json +66 -0
- package/docs/safety-index/artifacts/fbr-mcp.md +106 -0
- package/docs/safety-index/artifacts/fetch-server.json +4 -4
- package/docs/safety-index/artifacts/fetch-server.md +3 -3
- package/docs/safety-index/artifacts/fhir-server.json +66 -0
- package/docs/safety-index/artifacts/fhir-server.md +100 -0
- package/docs/safety-index/artifacts/figma-server.json +18 -18
- package/docs/safety-index/artifacts/figma-server.md +10 -10
- package/docs/safety-index/artifacts/filesystem-mcp-server.json +18 -18
- package/docs/safety-index/artifacts/filesystem-mcp-server.md +10 -10
- package/docs/safety-index/artifacts/filesystem-server.json +19 -19
- package/docs/safety-index/artifacts/filesystem-server.md +11 -11
- package/docs/safety-index/artifacts/firecrawl-server.json +18 -18
- package/docs/safety-index/artifacts/firecrawl-server.md +10 -10
- package/docs/safety-index/artifacts/flight-server.json +66 -0
- package/docs/safety-index/artifacts/flight-server.md +106 -0
- package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/gcp-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/gcp-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/github-mcp-server.json +18 -18
- package/docs/safety-index/artifacts/github-mcp-server.md +10 -10
- package/docs/safety-index/artifacts/gitlab-server.json +16 -16
- package/docs/safety-index/artifacts/gitlab-server.md +6 -6
- package/docs/safety-index/artifacts/gmail-server.json +4 -4
- package/docs/safety-index/artifacts/gmail-server.md +3 -3
- package/docs/safety-index/artifacts/google-calendar-server.json +4 -4
- package/docs/safety-index/artifacts/google-calendar-server.md +3 -3
- package/docs/safety-index/artifacts/google-drive-server.json +4 -4
- package/docs/safety-index/artifacts/google-drive-server.md +4 -4
- package/docs/safety-index/artifacts/google-sheets-server.json +4 -4
- package/docs/safety-index/artifacts/google-sheets-server.md +3 -3
- package/docs/safety-index/artifacts/google-tasks-server.json +4 -4
- package/docs/safety-index/artifacts/google-tasks-server.md +3 -3
- package/docs/safety-index/artifacts/gst-mcp.json +66 -0
- package/docs/safety-index/artifacts/gst-mcp.md +106 -0
- package/docs/safety-index/artifacts/gupshup-mcp.json +66 -0
- package/docs/safety-index/artifacts/gupshup-mcp.md +106 -0
- package/docs/safety-index/artifacts/hasura-mcp.json +66 -0
- package/docs/safety-index/artifacts/hasura-mcp.md +106 -0
- package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.json +66 -0
- package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.md +106 -0
- package/docs/safety-index/artifacts/hec-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/hec-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/heroku-server.json +1502 -0
- package/docs/safety-index/artifacts/heroku-server.md +236 -0
- package/docs/safety-index/artifacts/homekit-server.json +66 -0
- package/docs/safety-index/artifacts/homekit-server.md +106 -0
- package/docs/safety-index/artifacts/hotel-booking-server.json +66 -0
- package/docs/safety-index/artifacts/hotel-booking-server.md +106 -0
- package/docs/safety-index/artifacts/hubspot-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/hubspot-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/huggingface-server.json +4 -4
- package/docs/safety-index/artifacts/huggingface-server.md +3 -3
- package/docs/safety-index/artifacts/indian-food-nutrition-mcp.json +663 -0
- package/docs/safety-index/artifacts/indian-food-nutrition-mcp.md +211 -0
- package/docs/safety-index/artifacts/irctc-mcp.json +66 -0
- package/docs/safety-index/artifacts/irctc-mcp.md +106 -0
- package/docs/safety-index/artifacts/jazz-mcp.json +66 -0
- package/docs/safety-index/artifacts/jazz-mcp.md +106 -0
- package/docs/safety-index/artifacts/jazzcash-mcp.json +66 -0
- package/docs/safety-index/artifacts/jazzcash-mcp.md +102 -0
- package/docs/safety-index/artifacts/jina-server.json +4 -4
- package/docs/safety-index/artifacts/jina-server.md +3 -3
- package/docs/safety-index/artifacts/jira-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/jira-mcp-server.md +104 -0
- package/docs/safety-index/artifacts/k2-mcp.json +66 -0
- package/docs/safety-index/artifacts/k2-mcp.md +106 -0
- package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.json +67 -0
- package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.md +114 -0
- package/docs/safety-index/artifacts/khan-academy-server.json +66 -0
- package/docs/safety-index/artifacts/khan-academy-server.md +106 -0
- package/docs/safety-index/artifacts/kubernetes-server.json +104 -34
- package/docs/safety-index/artifacts/kubernetes-server.md +25 -21
- package/docs/safety-index/artifacts/langfuse-mcp.json +66 -0
- package/docs/safety-index/artifacts/langfuse-mcp.md +106 -0
- package/docs/safety-index/artifacts/linear-server.json +18 -18
- package/docs/safety-index/artifacts/linear-server.md +8 -8
- package/docs/safety-index/artifacts/mapmyindia-mcp.json +66 -0
- package/docs/safety-index/artifacts/mapmyindia-mcp.md +106 -0
- package/docs/safety-index/artifacts/memory-server.json +18 -18
- package/docs/safety-index/artifacts/memory-server.md +11 -11
- package/docs/safety-index/artifacts/minecraft-server.json +592 -0
- package/docs/safety-index/artifacts/minecraft-server.md +186 -0
- package/docs/safety-index/artifacts/mls-server.json +66 -0
- package/docs/safety-index/artifacts/mls-server.md +106 -0
- package/docs/safety-index/artifacts/mongodb-server.json +4 -4
- package/docs/safety-index/artifacts/mongodb-server.md +4 -4
- package/docs/safety-index/artifacts/mui-mcp-server.json +419 -0
- package/docs/safety-index/artifacts/mui-mcp-server.md +208 -0
- package/docs/safety-index/artifacts/mysql-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/mysql-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/nadra-mcp.json +66 -0
- package/docs/safety-index/artifacts/nadra-mcp.md +106 -0
- package/docs/safety-index/artifacts/neon-server.json +4 -4
- package/docs/safety-index/artifacts/neon-server.md +3 -3
- package/docs/safety-index/artifacts/notion-server.json +18 -18
- package/docs/safety-index/artifacts/notion-server.md +10 -10
- package/docs/safety-index/artifacts/obsidian-mcp.json +66 -0
- package/docs/safety-index/artifacts/obsidian-mcp.md +106 -0
- package/docs/safety-index/artifacts/ola-maps-mcp.json +66 -0
- package/docs/safety-index/artifacts/ola-maps-mcp.md +106 -0
- package/docs/safety-index/artifacts/olx-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/olx-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/onesignal-server.json +4 -4
- package/docs/safety-index/artifacts/onesignal-server.md +3 -3
- package/docs/safety-index/artifacts/openai-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/openai-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/opentofu-server.json +19 -19
- package/docs/safety-index/artifacts/opentofu-server.md +10 -10
- package/docs/safety-index/artifacts/openweather-server.json +66 -0
- package/docs/safety-index/artifacts/openweather-server.md +106 -0
- package/docs/safety-index/artifacts/pakistan-cricket-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-cricket-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakistan-post-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-post-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakistan-weather-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakistan-weather-mcp.md +106 -0
- package/docs/safety-index/artifacts/pakwheels-mcp.json +66 -0
- package/docs/safety-index/artifacts/pakwheels-mcp.md +106 -0
- package/docs/safety-index/artifacts/paytm-mcp.json +66 -0
- package/docs/safety-index/artifacts/paytm-mcp.md +106 -0
- package/docs/safety-index/artifacts/perplexity-mcp.json +66 -0
- package/docs/safety-index/artifacts/perplexity-mcp.md +106 -0
- package/docs/safety-index/artifacts/pims-mcp.json +66 -0
- package/docs/safety-index/artifacts/pims-mcp.md +106 -0
- package/docs/safety-index/artifacts/playwright-mcp-server.json +18 -18
- package/docs/safety-index/artifacts/playwright-mcp-server.md +8 -8
- package/docs/safety-index/artifacts/postgres-server.json +19 -19
- package/docs/safety-index/artifacts/postgres-server.md +9 -9
- package/docs/safety-index/artifacts/postman-india-region.json +66 -0
- package/docs/safety-index/artifacts/postman-india-region.md +102 -0
- package/docs/safety-index/artifacts/postman-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/postman-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/promptopia-server.json +21 -21
- package/docs/safety-index/artifacts/promptopia-server.md +11 -11
- package/docs/safety-index/artifacts/pubmed-mcp-server.json +58 -0
- package/docs/safety-index/artifacts/pubmed-mcp-server.md +96 -0
- package/docs/safety-index/artifacts/punjab-health-mcp.json +66 -0
- package/docs/safety-index/artifacts/punjab-health-mcp.md +106 -0
- package/docs/safety-index/artifacts/puppeteer-server.json +18 -18
- package/docs/safety-index/artifacts/puppeteer-server.md +9 -9
- package/docs/safety-index/artifacts/qase-server.json +7055 -0
- package/docs/safety-index/artifacts/qase-server.md +329 -0
- package/docs/safety-index/artifacts/qdrant-server.json +4 -4
- package/docs/safety-index/artifacts/qdrant-server.md +4 -4
- package/docs/safety-index/artifacts/raspberrypi-server.json +66 -0
- package/docs/safety-index/artifacts/raspberrypi-server.md +106 -0
- package/docs/safety-index/artifacts/razorpay-mcp.json +66 -0
- package/docs/safety-index/artifacts/razorpay-mcp.md +103 -0
- package/docs/safety-index/artifacts/reddit-server.json +4 -4
- package/docs/safety-index/artifacts/reddit-server.md +3 -3
- package/docs/safety-index/artifacts/redis-server.json +66 -0
- package/docs/safety-index/artifacts/redis-server.md +106 -0
- package/docs/safety-index/artifacts/ref-tools-server.json +18 -18
- package/docs/safety-index/artifacts/ref-tools-server.md +8 -8
- package/docs/safety-index/artifacts/resend-mcp.json +66 -0
- package/docs/safety-index/artifacts/resend-mcp.md +102 -0
- package/docs/safety-index/artifacts/rozgar-mcp.json +66 -0
- package/docs/safety-index/artifacts/rozgar-mcp.md +106 -0
- package/docs/safety-index/artifacts/s3-mcp-server.json +467 -0
- package/docs/safety-index/artifacts/s3-mcp-server.md +209 -0
- package/docs/safety-index/artifacts/salesforce-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/salesforce-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/sehat-sahulat-mcp.json +66 -0
- package/docs/safety-index/artifacts/sehat-sahulat-mcp.md +106 -0
- package/docs/safety-index/artifacts/sendgrid-mcp.json +66 -0
- package/docs/safety-index/artifacts/sendgrid-mcp.md +106 -0
- package/docs/safety-index/artifacts/sentry-server.json +3 -3
- package/docs/safety-index/artifacts/sentry-server.md +2 -2
- package/docs/safety-index/artifacts/sequential-thinking-server.json +18 -18
- package/docs/safety-index/artifacts/sequential-thinking-server.md +8 -8
- package/docs/safety-index/artifacts/shopify-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/shopify-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/shopify-mcp.json +66 -0
- package/docs/safety-index/artifacts/shopify-mcp.md +106 -0
- package/docs/safety-index/artifacts/shortcut-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/shortcut-mcp-server.md +102 -0
- package/docs/safety-index/artifacts/slack-server.json +3 -3
- package/docs/safety-index/artifacts/slack-server.md +2 -2
- package/docs/safety-index/artifacts/smartbear-mcp-server.json +21483 -0
- package/docs/safety-index/artifacts/smartbear-mcp-server.md +900 -0
- package/docs/safety-index/artifacts/spotify-mcp.json +2071 -0
- package/docs/safety-index/artifacts/spotify-mcp.md +237 -0
- package/docs/safety-index/artifacts/spotify-server.json +66 -0
- package/docs/safety-index/artifacts/spotify-server.md +106 -0
- package/docs/safety-index/artifacts/sqlite-server.json +4 -4
- package/docs/safety-index/artifacts/sqlite-server.md +3 -3
- package/docs/safety-index/artifacts/stable-diffusion-server.json +66 -0
- package/docs/safety-index/artifacts/stable-diffusion-server.md +106 -0
- package/docs/safety-index/artifacts/stock-nse-india.json +66 -0
- package/docs/safety-index/artifacts/stock-nse-india.md +106 -0
- package/docs/safety-index/artifacts/storybook-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/storybook-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/stripe-server.json +3 -3
- package/docs/safety-index/artifacts/stripe-server.md +2 -2
- package/docs/safety-index/artifacts/supabase-server.json +3 -3
- package/docs/safety-index/artifacts/supabase-server.md +2 -2
- package/docs/safety-index/artifacts/tavily-search-server.json +4 -4
- package/docs/safety-index/artifacts/tavily-search-server.md +3 -3
- package/docs/safety-index/artifacts/telegram-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/telegram-mcp-server.md +103 -0
- package/docs/safety-index/artifacts/telenor-pakistan-mcp.json +66 -0
- package/docs/safety-index/artifacts/telenor-pakistan-mcp.md +106 -0
- package/docs/safety-index/artifacts/textlocal-mcp.json +66 -0
- package/docs/safety-index/artifacts/textlocal-mcp.md +106 -0
- package/docs/safety-index/artifacts/tooljet-mcp.json +66 -0
- package/docs/safety-index/artifacts/tooljet-mcp.md +106 -0
- package/docs/safety-index/artifacts/transcend-server.json +3438 -0
- package/docs/safety-index/artifacts/transcend-server.md +277 -0
- package/docs/safety-index/artifacts/trello-mcp-server.json +916 -0
- package/docs/safety-index/artifacts/trello-mcp-server.md +211 -0
- package/docs/safety-index/artifacts/twilio-mcp.json +66 -0
- package/docs/safety-index/artifacts/twilio-mcp.md +106 -0
- package/docs/safety-index/artifacts/udyam-mcp.json +66 -0
- package/docs/safety-index/artifacts/udyam-mcp.md +106 -0
- package/docs/safety-index/artifacts/ufone-mcp.json +66 -0
- package/docs/safety-index/artifacts/ufone-mcp.md +106 -0
- package/docs/safety-index/artifacts/ui5-mcp-server.json +21 -21
- package/docs/safety-index/artifacts/ui5-mcp-server.md +10 -10
- package/docs/safety-index/artifacts/unity-server.json +66 -0
- package/docs/safety-index/artifacts/unity-server.md +102 -0
- package/docs/safety-index/artifacts/upi-mcp.json +452 -0
- package/docs/safety-index/artifacts/upi-mcp.md +201 -0
- package/docs/safety-index/artifacts/vercel-ai-server.json +4 -4
- package/docs/safety-index/artifacts/vercel-ai-server.md +4 -4
- package/docs/safety-index/artifacts/vimeo-server.json +66 -0
- package/docs/safety-index/artifacts/vimeo-server.md +106 -0
- package/docs/safety-index/artifacts/weather-server.json +66 -0
- package/docs/safety-index/artifacts/weather-server.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-business-mcp.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-business-mcp.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-mcp-server.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-mcp-server.md +106 -0
- package/docs/safety-index/artifacts/whatsapp-mcp.json +66 -0
- package/docs/safety-index/artifacts/whatsapp-mcp.md +106 -0
- package/docs/safety-index/artifacts/yahoo-finance-server.json +626 -0
- package/docs/safety-index/artifacts/yahoo-finance-server.md +187 -0
- package/docs/safety-index/artifacts/youtube-mcp-server.json +58 -0
- package/docs/safety-index/artifacts/youtube-mcp-server.md +96 -0
- package/docs/safety-index/artifacts/youtube-server.json +66 -0
- package/docs/safety-index/artifacts/youtube-server.md +103 -0
- package/docs/safety-index/artifacts/zendesk-mcp.json +66 -0
- package/docs/safety-index/artifacts/zendesk-mcp.md +106 -0
- package/docs/safety-index/artifacts/zillow-server.json +66 -0
- package/docs/safety-index/artifacts/zillow-server.md +102 -0
- package/docs/safety-index/artifacts/zong-mcp.json +66 -0
- package/docs/safety-index/artifacts/zong-mcp.md +106 -0
- package/docs/safety-index/targets.json +2145 -20
- package/package.json +10 -9
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# MCP Observatory Run Report
|
|
2
2
|
|
|
3
|
-
Generated at 2026-07-
|
|
3
|
+
Generated at 2026-07-15T22:33:52.227Z
|
|
4
4
|
|
|
5
5
|
## Target and Environment Metadata
|
|
6
6
|
|
|
@@ -60,7 +60,7 @@ Recent stderr:
|
|
|
60
60
|
- npm error 404
|
|
61
61
|
- npm error 404 Note that you can also install from a
|
|
62
62
|
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
-
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_33_52_302Z-debug-0.log
|
|
64
64
|
```
|
|
65
65
|
|
|
66
66
|
## Full Capability Status Table
|
|
@@ -102,5 +102,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
|
102
102
|
|
|
103
103
|
- Artifact type: `run`
|
|
104
104
|
- Schema version: `1.0.0`
|
|
105
|
-
- Run ID: `run_2026-07-
|
|
105
|
+
- Run ID: `run_2026-07-15T223352227Z_6f84b1e5`
|
|
106
106
|
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223507502Z_fd937183",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:07.502Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "gst-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"gst-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "gst-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Tax filing and invoice API access",
|
|
21
|
+
"failureClass": "GST return/invoice/billing boundary",
|
|
22
|
+
"whyItMatters": "India's Goods and Services Tax system processes billions of invoices. MCP servers generating e-invoices, filing returns, or pulling GSTIN data handle tax-compliance-grade financial information."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `gst-mcp`.\nCommand: npx -y gst-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'gst-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_07_576Z-debug-0.log"
|
|
66
|
+
}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
# MCP Observatory Run Report
|
|
2
|
+
|
|
3
|
+
Generated at 2026-07-15T22:35:07.502Z
|
|
4
|
+
|
|
5
|
+
## Target and Environment Metadata
|
|
6
|
+
|
|
7
|
+
- Target: `gst-mcp`
|
|
8
|
+
- Adapter: `local-process`
|
|
9
|
+
- Command: `npx -y gst-mcp`
|
|
10
|
+
- Server: `unknown `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
|
+
|
|
14
|
+
## Executive Summary
|
|
15
|
+
|
|
16
|
+
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
17
|
+
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
18
|
+
| fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
|
|
19
|
+
|
|
20
|
+
## At a Glance
|
|
21
|
+
|
|
22
|
+
- Safety verdict: **Blocked** â One or more checks can break agent dependence and should be fixed before production use.
|
|
23
|
+
- Top risks: startup: server failed to start
|
|
24
|
+
- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
|
|
25
|
+
- Failing checks: none
|
|
26
|
+
- Partial or flaky checks: none
|
|
27
|
+
- Skipped checks: tools, prompts, resources
|
|
28
|
+
- Unsupported checks: none
|
|
29
|
+
- Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
|
|
30
|
+
- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
|
|
31
|
+
|
|
32
|
+
## What Was Not Tested
|
|
33
|
+
|
|
34
|
+
- đ network_egress: No outbound network calls were attempted during scan
|
|
35
|
+
- đ filesystem_mutation: Filesystem write operations were not exercised
|
|
36
|
+
- đ credential_access: Credential scanning was not performed
|
|
37
|
+
- âšī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
|
|
38
|
+
|
|
39
|
+
## Regressions and Recoveries
|
|
40
|
+
|
|
41
|
+
_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
|
|
42
|
+
|
|
43
|
+
## Failure Diagnosis
|
|
44
|
+
|
|
45
|
+
```text
|
|
46
|
+
Could not establish a plain stdio MCP session for target `gst-mcp`.
|
|
47
|
+
Command: npx -y gst-mcp
|
|
48
|
+
Diagnosis: The process exited or detached before MCP initialization completed.
|
|
49
|
+
Raw error: MCP error -32000: Connection closed
|
|
50
|
+
Likely causes:
|
|
51
|
+
- The package may expect extra startup arguments or environment variables.
|
|
52
|
+
- The package may not behave like a plain local-process stdio target under this invocation.
|
|
53
|
+
- The server may be crashing immediately and only leaving clues on stderr.
|
|
54
|
+
Next steps:
|
|
55
|
+
- Run the command manually and look for usage output, auth prompts, or crash text.
|
|
56
|
+
- Check whether the package expects a different transport or an app-oriented startup flow.
|
|
57
|
+
- Use the recent stderr lines below before assuming this is a harness bug.
|
|
58
|
+
Recent stderr:
|
|
59
|
+
- npm error 404 'gst-mcp@*' is not in this registry.
|
|
60
|
+
- npm error 404
|
|
61
|
+
- npm error 404 Note that you can also install from a
|
|
62
|
+
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_07_576Z-debug-0.log
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
## Full Capability Status Table
|
|
67
|
+
|
|
68
|
+
| Focus | Check | Status | Duration (ms) | Message |
|
|
69
|
+
| --- | --- | --- | --- | --- |
|
|
70
|
+
| inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
71
|
+
| inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
72
|
+
| inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
73
|
+
|
|
74
|
+
## Evidence Snippets
|
|
75
|
+
|
|
76
|
+
### prompts â skipped
|
|
77
|
+
|
|
78
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
79
|
+
|
|
80
|
+
_No evidence was captured._
|
|
81
|
+
|
|
82
|
+
### resources â skipped
|
|
83
|
+
|
|
84
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
85
|
+
|
|
86
|
+
_No evidence was captured._
|
|
87
|
+
|
|
88
|
+
### tools â skipped
|
|
89
|
+
|
|
90
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
91
|
+
|
|
92
|
+
_No evidence was captured._
|
|
93
|
+
|
|
94
|
+
## Reproduction Commands
|
|
95
|
+
|
|
96
|
+
```bash
|
|
97
|
+
npm run cli -- run --target <path-to-target-config.json>
|
|
98
|
+
npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
99
|
+
```
|
|
100
|
+
|
|
101
|
+
## Artifact Provenance
|
|
102
|
+
|
|
103
|
+
- Artifact type: `run`
|
|
104
|
+
- Schema version: `1.0.0`
|
|
105
|
+
- Run ID: `run_2026-07-15T223507502Z_fd937183`
|
|
106
|
+
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223508175Z_ec02452e",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:08.175Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "gupshup-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"gupshup-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "gupshup-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Indian messaging platform access",
|
|
21
|
+
"failureClass": "Multi-channel message boundary",
|
|
22
|
+
"whyItMatters": "Gupshup powers 10B+ messages/month across SMS, WhatsApp, and chatbots for Indian enterprises. Multi-channel MCP servers need visible message-audience and rate-limit boundaries."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `gupshup-mcp`.\nCommand: npx -y gupshup-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'gupshup-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_08_242Z-debug-0.log"
|
|
66
|
+
}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
# MCP Observatory Run Report
|
|
2
|
+
|
|
3
|
+
Generated at 2026-07-15T22:35:08.175Z
|
|
4
|
+
|
|
5
|
+
## Target and Environment Metadata
|
|
6
|
+
|
|
7
|
+
- Target: `gupshup-mcp`
|
|
8
|
+
- Adapter: `local-process`
|
|
9
|
+
- Command: `npx -y gupshup-mcp`
|
|
10
|
+
- Server: `unknown `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
|
+
|
|
14
|
+
## Executive Summary
|
|
15
|
+
|
|
16
|
+
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
17
|
+
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
18
|
+
| fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
|
|
19
|
+
|
|
20
|
+
## At a Glance
|
|
21
|
+
|
|
22
|
+
- Safety verdict: **Blocked** â One or more checks can break agent dependence and should be fixed before production use.
|
|
23
|
+
- Top risks: startup: server failed to start
|
|
24
|
+
- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
|
|
25
|
+
- Failing checks: none
|
|
26
|
+
- Partial or flaky checks: none
|
|
27
|
+
- Skipped checks: tools, prompts, resources
|
|
28
|
+
- Unsupported checks: none
|
|
29
|
+
- Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
|
|
30
|
+
- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
|
|
31
|
+
|
|
32
|
+
## What Was Not Tested
|
|
33
|
+
|
|
34
|
+
- đ network_egress: No outbound network calls were attempted during scan
|
|
35
|
+
- đ filesystem_mutation: Filesystem write operations were not exercised
|
|
36
|
+
- đ credential_access: Credential scanning was not performed
|
|
37
|
+
- âšī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
|
|
38
|
+
|
|
39
|
+
## Regressions and Recoveries
|
|
40
|
+
|
|
41
|
+
_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
|
|
42
|
+
|
|
43
|
+
## Failure Diagnosis
|
|
44
|
+
|
|
45
|
+
```text
|
|
46
|
+
Could not establish a plain stdio MCP session for target `gupshup-mcp`.
|
|
47
|
+
Command: npx -y gupshup-mcp
|
|
48
|
+
Diagnosis: The process exited or detached before MCP initialization completed.
|
|
49
|
+
Raw error: MCP error -32000: Connection closed
|
|
50
|
+
Likely causes:
|
|
51
|
+
- The package may expect extra startup arguments or environment variables.
|
|
52
|
+
- The package may not behave like a plain local-process stdio target under this invocation.
|
|
53
|
+
- The server may be crashing immediately and only leaving clues on stderr.
|
|
54
|
+
Next steps:
|
|
55
|
+
- Run the command manually and look for usage output, auth prompts, or crash text.
|
|
56
|
+
- Check whether the package expects a different transport or an app-oriented startup flow.
|
|
57
|
+
- Use the recent stderr lines below before assuming this is a harness bug.
|
|
58
|
+
Recent stderr:
|
|
59
|
+
- npm error 404 'gupshup-mcp@*' is not in this registry.
|
|
60
|
+
- npm error 404
|
|
61
|
+
- npm error 404 Note that you can also install from a
|
|
62
|
+
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_08_242Z-debug-0.log
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
## Full Capability Status Table
|
|
67
|
+
|
|
68
|
+
| Focus | Check | Status | Duration (ms) | Message |
|
|
69
|
+
| --- | --- | --- | --- | --- |
|
|
70
|
+
| inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
71
|
+
| inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
72
|
+
| inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
73
|
+
|
|
74
|
+
## Evidence Snippets
|
|
75
|
+
|
|
76
|
+
### prompts â skipped
|
|
77
|
+
|
|
78
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
79
|
+
|
|
80
|
+
_No evidence was captured._
|
|
81
|
+
|
|
82
|
+
### resources â skipped
|
|
83
|
+
|
|
84
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
85
|
+
|
|
86
|
+
_No evidence was captured._
|
|
87
|
+
|
|
88
|
+
### tools â skipped
|
|
89
|
+
|
|
90
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
91
|
+
|
|
92
|
+
_No evidence was captured._
|
|
93
|
+
|
|
94
|
+
## Reproduction Commands
|
|
95
|
+
|
|
96
|
+
```bash
|
|
97
|
+
npm run cli -- run --target <path-to-target-config.json>
|
|
98
|
+
npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
99
|
+
```
|
|
100
|
+
|
|
101
|
+
## Artifact Provenance
|
|
102
|
+
|
|
103
|
+
- Artifact type: `run`
|
|
104
|
+
- Schema version: `1.0.0`
|
|
105
|
+
- Run ID: `run_2026-07-15T223508175Z_ec02452e`
|
|
106
|
+
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223510342Z_f427c7f2",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:10.342Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "hasura-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"hasura-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "hasura-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "GraphQL engine and database access",
|
|
21
|
+
"failureClass": "GraphQL/Database query boundary",
|
|
22
|
+
"whyItMatters": "Hasura (32K+ GitHub stars, Indian OSS) provides instant GraphQL APIs over databases. MCP servers managing Hasura metadata, migrations, and queries can affect production database schemas."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `hasura-mcp`.\nCommand: npx -y hasura-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'hasura-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_10_408Z-debug-0.log"
|
|
66
|
+
}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
# MCP Observatory Run Report
|
|
2
|
+
|
|
3
|
+
Generated at 2026-07-15T22:35:10.342Z
|
|
4
|
+
|
|
5
|
+
## Target and Environment Metadata
|
|
6
|
+
|
|
7
|
+
- Target: `hasura-mcp`
|
|
8
|
+
- Adapter: `local-process`
|
|
9
|
+
- Command: `npx -y hasura-mcp`
|
|
10
|
+
- Server: `unknown `
|
|
11
|
+
- Platform: `darwin 25.5.0`
|
|
12
|
+
- Node: `v22.22.1`
|
|
13
|
+
|
|
14
|
+
## Executive Summary
|
|
15
|
+
|
|
16
|
+
| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
|
|
17
|
+
| --- | --- | --- | --- | --- | --- | --- | --- |
|
|
18
|
+
| fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
|
|
19
|
+
|
|
20
|
+
## At a Glance
|
|
21
|
+
|
|
22
|
+
- Safety verdict: **Blocked** â One or more checks can break agent dependence and should be fixed before production use.
|
|
23
|
+
- Top risks: startup: server failed to start
|
|
24
|
+
- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
|
|
25
|
+
- Failing checks: none
|
|
26
|
+
- Partial or flaky checks: none
|
|
27
|
+
- Skipped checks: tools, prompts, resources
|
|
28
|
+
- Unsupported checks: none
|
|
29
|
+
- Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
|
|
30
|
+
- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
|
|
31
|
+
|
|
32
|
+
## What Was Not Tested
|
|
33
|
+
|
|
34
|
+
- đ network_egress: No outbound network calls were attempted during scan
|
|
35
|
+
- đ filesystem_mutation: Filesystem write operations were not exercised
|
|
36
|
+
- đ credential_access: Credential scanning was not performed
|
|
37
|
+
- âšī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
|
|
38
|
+
|
|
39
|
+
## Regressions and Recoveries
|
|
40
|
+
|
|
41
|
+
_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
|
|
42
|
+
|
|
43
|
+
## Failure Diagnosis
|
|
44
|
+
|
|
45
|
+
```text
|
|
46
|
+
Could not establish a plain stdio MCP session for target `hasura-mcp`.
|
|
47
|
+
Command: npx -y hasura-mcp
|
|
48
|
+
Diagnosis: The process exited or detached before MCP initialization completed.
|
|
49
|
+
Raw error: MCP error -32000: Connection closed
|
|
50
|
+
Likely causes:
|
|
51
|
+
- The package may expect extra startup arguments or environment variables.
|
|
52
|
+
- The package may not behave like a plain local-process stdio target under this invocation.
|
|
53
|
+
- The server may be crashing immediately and only leaving clues on stderr.
|
|
54
|
+
Next steps:
|
|
55
|
+
- Run the command manually and look for usage output, auth prompts, or crash text.
|
|
56
|
+
- Check whether the package expects a different transport or an app-oriented startup flow.
|
|
57
|
+
- Use the recent stderr lines below before assuming this is a harness bug.
|
|
58
|
+
Recent stderr:
|
|
59
|
+
- npm error 404 'hasura-mcp@*' is not in this registry.
|
|
60
|
+
- npm error 404
|
|
61
|
+
- npm error 404 Note that you can also install from a
|
|
62
|
+
- npm error 404 tarball, folder, http url, or git url.
|
|
63
|
+
- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_10_408Z-debug-0.log
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
## Full Capability Status Table
|
|
67
|
+
|
|
68
|
+
| Focus | Check | Status | Duration (ms) | Message |
|
|
69
|
+
| --- | --- | --- | --- | --- |
|
|
70
|
+
| inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
71
|
+
| inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
72
|
+
| inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
|
|
73
|
+
|
|
74
|
+
## Evidence Snippets
|
|
75
|
+
|
|
76
|
+
### prompts â skipped
|
|
77
|
+
|
|
78
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
79
|
+
|
|
80
|
+
_No evidence was captured._
|
|
81
|
+
|
|
82
|
+
### resources â skipped
|
|
83
|
+
|
|
84
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
85
|
+
|
|
86
|
+
_No evidence was captured._
|
|
87
|
+
|
|
88
|
+
### tools â skipped
|
|
89
|
+
|
|
90
|
+
Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
|
|
91
|
+
|
|
92
|
+
_No evidence was captured._
|
|
93
|
+
|
|
94
|
+
## Reproduction Commands
|
|
95
|
+
|
|
96
|
+
```bash
|
|
97
|
+
npm run cli -- run --target <path-to-target-config.json>
|
|
98
|
+
npm run cli -- report --run <path-to-run-artifact.json> --format markdown
|
|
99
|
+
```
|
|
100
|
+
|
|
101
|
+
## Artifact Provenance
|
|
102
|
+
|
|
103
|
+
- Artifact type: `run`
|
|
104
|
+
- Schema version: `1.0.0`
|
|
105
|
+
- Run ID: `run_2026-07-15T223510342Z_f427c7f2`
|
|
106
|
+
- Gate: `fail`
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
{
|
|
2
|
+
"artifactType": "run",
|
|
3
|
+
"schemaVersion": "1.0.0",
|
|
4
|
+
"gate": "fail",
|
|
5
|
+
"runId": "run_2026-07-15T223546541Z_18af4e7f",
|
|
6
|
+
"createdAt": "2026-07-15T22:35:46.541Z",
|
|
7
|
+
"toolVersion": "1.32.1",
|
|
8
|
+
"target": {
|
|
9
|
+
"targetId": "healthcare-ayushman-bharat-mcp",
|
|
10
|
+
"adapter": "local-process",
|
|
11
|
+
"command": "npx",
|
|
12
|
+
"args": [
|
|
13
|
+
"-y",
|
|
14
|
+
"healthcare-ayushman-bharat-mcp"
|
|
15
|
+
],
|
|
16
|
+
"cwd": ".",
|
|
17
|
+
"metadata": {
|
|
18
|
+
"package": "healthcare-ayushman-bharat-mcp",
|
|
19
|
+
"purpose": "mcp-safety-index",
|
|
20
|
+
"riskClass": "Public healthcare scheme API access",
|
|
21
|
+
"failureClass": "Patient/claim/hospital boundary",
|
|
22
|
+
"whyItMatters": "Ayushman Bharat covers 500M+ Indians with public health insurance. MCP servers accessing patient records, hospital claims, and benefits handle India's largest healthcare dataset with PHI implications."
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"environment": {
|
|
26
|
+
"platform": "darwin 25.5.0",
|
|
27
|
+
"nodeVersion": "v22.22.1"
|
|
28
|
+
},
|
|
29
|
+
"summary": {
|
|
30
|
+
"total": 3,
|
|
31
|
+
"pass": 0,
|
|
32
|
+
"fail": 0,
|
|
33
|
+
"partial": 0,
|
|
34
|
+
"unsupported": 0,
|
|
35
|
+
"flaky": 0,
|
|
36
|
+
"skipped": 3,
|
|
37
|
+
"gate": "fail"
|
|
38
|
+
},
|
|
39
|
+
"checks": [
|
|
40
|
+
{
|
|
41
|
+
"id": "tools",
|
|
42
|
+
"capability": "tools",
|
|
43
|
+
"status": "skipped",
|
|
44
|
+
"durationMs": 0,
|
|
45
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
46
|
+
"evidence": []
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prompts",
|
|
50
|
+
"capability": "prompts",
|
|
51
|
+
"status": "skipped",
|
|
52
|
+
"durationMs": 0,
|
|
53
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
54
|
+
"evidence": []
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"id": "resources",
|
|
58
|
+
"capability": "resources",
|
|
59
|
+
"status": "skipped",
|
|
60
|
+
"durationMs": 0,
|
|
61
|
+
"message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
|
|
62
|
+
"evidence": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"fatalError": "Could not establish a plain stdio MCP session for target `healthcare-ayushman-bharat-mcp`.\nCommand: npx -y healthcare-ayushman-bharat-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'healthcare-ayushman-bharat-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_46_605Z-debug-0.log"
|
|
66
|
+
}
|