@kryptosai/mcp-observatory 1.32.1 → 1.34.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (409) hide show
  1. package/README.md +11 -122
  2. package/dist/src/auth.d.ts +22 -0
  3. package/dist/src/auth.js +140 -0
  4. package/dist/src/auth.js.map +1 -0
  5. package/dist/src/cli.js +55 -4
  6. package/dist/src/cli.js.map +1 -1
  7. package/dist/src/commands/audit.js +7 -1
  8. package/dist/src/commands/audit.js.map +1 -1
  9. package/dist/src/commands/demo.d.ts +2 -0
  10. package/dist/src/commands/demo.js +247 -0
  11. package/dist/src/commands/demo.js.map +1 -0
  12. package/dist/src/commands/enforce.js +14 -3
  13. package/dist/src/commands/enforce.js.map +1 -1
  14. package/dist/src/commands/helpers.d.ts +13 -0
  15. package/dist/src/commands/helpers.js +34 -1
  16. package/dist/src/commands/helpers.js.map +1 -1
  17. package/dist/src/commands/init-ci.d.ts +1 -0
  18. package/dist/src/commands/init-ci.js +157 -10
  19. package/dist/src/commands/init-ci.js.map +1 -1
  20. package/dist/src/commands/receipt.js +13 -3
  21. package/dist/src/commands/receipt.js.map +1 -1
  22. package/dist/src/commands/scan.d.ts +14 -0
  23. package/dist/src/commands/scan.js +51 -3
  24. package/dist/src/commands/scan.js.map +1 -1
  25. package/dist/src/commands/score.js +22 -1
  26. package/dist/src/commands/score.js.map +1 -1
  27. package/dist/src/commands/setup-ci-conversion.js +4 -4
  28. package/dist/src/commands/setup-ci-conversion.js.map +1 -1
  29. package/dist/src/commands/skill-scan.js +5 -3
  30. package/dist/src/commands/skill-scan.js.map +1 -1
  31. package/dist/src/commands/test.d.ts +19 -0
  32. package/dist/src/commands/test.js +77 -3
  33. package/dist/src/commands/test.js.map +1 -1
  34. package/dist/src/commercial.d.ts +3 -0
  35. package/dist/src/commercial.js +14 -3
  36. package/dist/src/commercial.js.map +1 -1
  37. package/dist/src/index.d.ts +1 -1
  38. package/dist/src/index.js +1 -1
  39. package/dist/src/index.js.map +1 -1
  40. package/dist/src/receipt.d.ts +9 -0
  41. package/dist/src/receipt.js +24 -1
  42. package/dist/src/receipt.js.map +1 -1
  43. package/dist/src/telemetry.d.ts +25 -3
  44. package/dist/src/telemetry.js +88 -19
  45. package/dist/src/telemetry.js.map +1 -1
  46. package/dist/src/utils/failure-diagnosis.d.ts +7 -0
  47. package/dist/src/utils/failure-diagnosis.js +14 -0
  48. package/dist/src/utils/failure-diagnosis.js.map +1 -1
  49. package/docs/mcp-server-safety-index.md +255 -6
  50. package/docs/safety-index/artifacts/1link-mcp.json +66 -0
  51. package/docs/safety-index/artifacts/1link-mcp.md +106 -0
  52. package/docs/safety-index/artifacts/aadhaar-mcp.json +66 -0
  53. package/docs/safety-index/artifacts/aadhaar-mcp.md +106 -0
  54. package/docs/safety-index/artifacts/aikidosec-mcp-server.json +536 -0
  55. package/docs/safety-index/artifacts/aikidosec-mcp-server.md +203 -0
  56. package/docs/safety-index/artifacts/aiou-mcp.json +66 -0
  57. package/docs/safety-index/artifacts/aiou-mcp.md +106 -0
  58. package/docs/safety-index/artifacts/airtable-mcp-server.json +66 -0
  59. package/docs/safety-index/artifacts/airtable-mcp-server.md +106 -0
  60. package/docs/safety-index/artifacts/alpaca-server.json +66 -0
  61. package/docs/safety-index/artifacts/alpaca-server.md +106 -0
  62. package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
  63. package/docs/safety-index/artifacts/antv-chart-server.md +11 -11
  64. package/docs/safety-index/artifacts/apify-mcp-server.json +66 -0
  65. package/docs/safety-index/artifacts/apify-mcp-server.md +103 -0
  66. package/docs/safety-index/artifacts/apple-music-server.json +66 -0
  67. package/docs/safety-index/artifacts/apple-music-server.md +102 -0
  68. package/docs/safety-index/artifacts/appwrite-mcp.json +66 -0
  69. package/docs/safety-index/artifacts/appwrite-mcp.md +106 -0
  70. package/docs/safety-index/artifacts/aqi-india-mcp.json +66 -0
  71. package/docs/safety-index/artifacts/aqi-india-mcp.md +106 -0
  72. package/docs/safety-index/artifacts/argocd-mcp-server.json +66 -0
  73. package/docs/safety-index/artifacts/argocd-mcp-server.md +106 -0
  74. package/docs/safety-index/artifacts/arxiv-mcp-server.json +66 -0
  75. package/docs/safety-index/artifacts/arxiv-mcp-server.md +100 -0
  76. package/docs/safety-index/artifacts/aws-mcp-server.json +66 -0
  77. package/docs/safety-index/artifacts/aws-mcp-server.md +103 -0
  78. package/docs/safety-index/artifacts/azure-devops-mcp-server.json +66 -0
  79. package/docs/safety-index/artifacts/azure-devops-mcp-server.md +106 -0
  80. package/docs/safety-index/artifacts/azure-mcp-server.json +66 -0
  81. package/docs/safety-index/artifacts/azure-mcp-server.md +102 -0
  82. package/docs/safety-index/artifacts/bhuvan-mcp.json +66 -0
  83. package/docs/safety-index/artifacts/bhuvan-mcp.md +106 -0
  84. package/docs/safety-index/artifacts/brave-search-mcp-server-v2.json +66 -0
  85. package/docs/safety-index/artifacts/brave-search-mcp-server-v2.md +103 -0
  86. package/docs/safety-index/artifacts/brave-search-server.json +18 -18
  87. package/docs/safety-index/artifacts/brave-search-server.md +6 -6
  88. package/docs/safety-index/artifacts/browsermcp-server.json +18 -18
  89. package/docs/safety-index/artifacts/browsermcp-server.md +9 -9
  90. package/docs/safety-index/artifacts/cal-com-mcp.json +66 -0
  91. package/docs/safety-index/artifacts/cal-com-mcp.md +106 -0
  92. package/docs/safety-index/artifacts/canvas-server.json +66 -0
  93. package/docs/safety-index/artifacts/canvas-server.md +105 -0
  94. package/docs/safety-index/artifacts/caselaw-server.json +66 -0
  95. package/docs/safety-index/artifacts/caselaw-server.md +106 -0
  96. package/docs/safety-index/artifacts/chatwoot-mcp.json +66 -0
  97. package/docs/safety-index/artifacts/chatwoot-mcp.md +102 -0
  98. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +23 -23
  99. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +12 -12
  100. package/docs/safety-index/artifacts/circleci-server.json +1606 -0
  101. package/docs/safety-index/artifacts/circleci-server.md +243 -0
  102. package/docs/safety-index/artifacts/clarity-server.json +794 -0
  103. package/docs/safety-index/artifacts/clarity-server.md +201 -0
  104. package/docs/safety-index/artifacts/clay-server.json +4 -4
  105. package/docs/safety-index/artifacts/clay-server.md +3 -3
  106. package/docs/safety-index/artifacts/clickup-mcp-server.json +66 -0
  107. package/docs/safety-index/artifacts/clickup-mcp-server.md +106 -0
  108. package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.json +66 -0
  109. package/docs/safety-index/artifacts/cloudflare-mcp-server-v2.md +102 -0
  110. package/docs/safety-index/artifacts/cloudflare-server.json +4 -4
  111. package/docs/safety-index/artifacts/cloudflare-server.md +4 -4
  112. package/docs/safety-index/artifacts/coinbase-cds-server.json +322 -0
  113. package/docs/safety-index/artifacts/coinbase-cds-server.md +201 -0
  114. package/docs/safety-index/artifacts/confluence-mcp-server.json +1727 -0
  115. package/docs/safety-index/artifacts/confluence-mcp-server.md +255 -0
  116. package/docs/safety-index/artifacts/context7-server.json +18 -18
  117. package/docs/safety-index/artifacts/context7-server.md +12 -12
  118. package/docs/safety-index/artifacts/contract-analysis-server.json +66 -0
  119. package/docs/safety-index/artifacts/contract-analysis-server.md +106 -0
  120. package/docs/safety-index/artifacts/cowin-mcp.json +66 -0
  121. package/docs/safety-index/artifacts/cowin-mcp.md +106 -0
  122. package/docs/safety-index/artifacts/currents-mcp-server.json +66 -0
  123. package/docs/safety-index/artifacts/currents-mcp-server.md +102 -0
  124. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +34 -34
  125. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +15 -15
  126. package/docs/safety-index/artifacts/dalle-server.json +66 -0
  127. package/docs/safety-index/artifacts/dalle-server.md +104 -0
  128. package/docs/safety-index/artifacts/daraz-mcp.json +66 -0
  129. package/docs/safety-index/artifacts/daraz-mcp.md +106 -0
  130. package/docs/safety-index/artifacts/desktop-commander-mcp-server.json +2348 -0
  131. package/docs/safety-index/artifacts/desktop-commander-mcp-server.md +266 -0
  132. package/docs/safety-index/artifacts/digilocker-mcp.json +66 -0
  133. package/docs/safety-index/artifacts/digilocker-mcp.md +106 -0
  134. package/docs/safety-index/artifacts/discord-mcp-server.json +1297 -0
  135. package/docs/safety-index/artifacts/discord-mcp-server.md +169 -0
  136. package/docs/safety-index/artifacts/discord-mcp.json +1023 -0
  137. package/docs/safety-index/artifacts/discord-mcp.md +229 -0
  138. package/docs/safety-index/artifacts/docker-server.json +19 -19
  139. package/docs/safety-index/artifacts/docker-server.md +8 -8
  140. package/docs/safety-index/artifacts/dynamodb-mcp-server.json +66 -0
  141. package/docs/safety-index/artifacts/dynamodb-mcp-server.md +103 -0
  142. package/docs/safety-index/artifacts/dynatrace-mcp-server.json +66 -0
  143. package/docs/safety-index/artifacts/dynatrace-mcp-server.md +103 -0
  144. package/docs/safety-index/artifacts/easypaisa-mcp.json +553 -0
  145. package/docs/safety-index/artifacts/easypaisa-mcp.md +205 -0
  146. package/docs/safety-index/artifacts/ehsaas-mcp.json +66 -0
  147. package/docs/safety-index/artifacts/ehsaas-mcp.md +106 -0
  148. package/docs/safety-index/artifacts/epic-server.json +66 -0
  149. package/docs/safety-index/artifacts/epic-server.md +106 -0
  150. package/docs/safety-index/artifacts/eslint-mcp-server.json +320 -0
  151. package/docs/safety-index/artifacts/eslint-mcp-server.md +201 -0
  152. package/docs/safety-index/artifacts/espn-server.json +394 -0
  153. package/docs/safety-index/artifacts/espn-server.md +187 -0
  154. package/docs/safety-index/artifacts/everything-server.json +18 -18
  155. package/docs/safety-index/artifacts/everything-server.md +12 -12
  156. package/docs/safety-index/artifacts/exa-server.json +22 -22
  157. package/docs/safety-index/artifacts/exa-server.md +14 -14
  158. package/docs/safety-index/artifacts/executeautomation-playwright-server.json +19 -19
  159. package/docs/safety-index/artifacts/executeautomation-playwright-server.md +11 -11
  160. package/docs/safety-index/artifacts/fbr-mcp.json +66 -0
  161. package/docs/safety-index/artifacts/fbr-mcp.md +106 -0
  162. package/docs/safety-index/artifacts/fetch-server.json +4 -4
  163. package/docs/safety-index/artifacts/fetch-server.md +3 -3
  164. package/docs/safety-index/artifacts/fhir-server.json +66 -0
  165. package/docs/safety-index/artifacts/fhir-server.md +100 -0
  166. package/docs/safety-index/artifacts/figma-server.json +18 -18
  167. package/docs/safety-index/artifacts/figma-server.md +10 -10
  168. package/docs/safety-index/artifacts/filesystem-mcp-server.json +18 -18
  169. package/docs/safety-index/artifacts/filesystem-mcp-server.md +10 -10
  170. package/docs/safety-index/artifacts/filesystem-server.json +19 -19
  171. package/docs/safety-index/artifacts/filesystem-server.md +11 -11
  172. package/docs/safety-index/artifacts/firecrawl-server.json +18 -18
  173. package/docs/safety-index/artifacts/firecrawl-server.md +10 -10
  174. package/docs/safety-index/artifacts/flight-server.json +66 -0
  175. package/docs/safety-index/artifacts/flight-server.md +106 -0
  176. package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.json +66 -0
  177. package/docs/safety-index/artifacts/foodpanda-pakistan-mcp.md +106 -0
  178. package/docs/safety-index/artifacts/gcp-mcp-server.json +66 -0
  179. package/docs/safety-index/artifacts/gcp-mcp-server.md +103 -0
  180. package/docs/safety-index/artifacts/github-mcp-server.json +18 -18
  181. package/docs/safety-index/artifacts/github-mcp-server.md +10 -10
  182. package/docs/safety-index/artifacts/gitlab-server.json +16 -16
  183. package/docs/safety-index/artifacts/gitlab-server.md +6 -6
  184. package/docs/safety-index/artifacts/gmail-server.json +4 -4
  185. package/docs/safety-index/artifacts/gmail-server.md +3 -3
  186. package/docs/safety-index/artifacts/google-calendar-server.json +4 -4
  187. package/docs/safety-index/artifacts/google-calendar-server.md +3 -3
  188. package/docs/safety-index/artifacts/google-drive-server.json +4 -4
  189. package/docs/safety-index/artifacts/google-drive-server.md +4 -4
  190. package/docs/safety-index/artifacts/google-sheets-server.json +4 -4
  191. package/docs/safety-index/artifacts/google-sheets-server.md +3 -3
  192. package/docs/safety-index/artifacts/google-tasks-server.json +4 -4
  193. package/docs/safety-index/artifacts/google-tasks-server.md +3 -3
  194. package/docs/safety-index/artifacts/gst-mcp.json +66 -0
  195. package/docs/safety-index/artifacts/gst-mcp.md +106 -0
  196. package/docs/safety-index/artifacts/gupshup-mcp.json +66 -0
  197. package/docs/safety-index/artifacts/gupshup-mcp.md +106 -0
  198. package/docs/safety-index/artifacts/hasura-mcp.json +66 -0
  199. package/docs/safety-index/artifacts/hasura-mcp.md +106 -0
  200. package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.json +66 -0
  201. package/docs/safety-index/artifacts/healthcare-ayushman-bharat-mcp.md +106 -0
  202. package/docs/safety-index/artifacts/hec-pakistan-mcp.json +66 -0
  203. package/docs/safety-index/artifacts/hec-pakistan-mcp.md +106 -0
  204. package/docs/safety-index/artifacts/heroku-server.json +1502 -0
  205. package/docs/safety-index/artifacts/heroku-server.md +236 -0
  206. package/docs/safety-index/artifacts/homekit-server.json +66 -0
  207. package/docs/safety-index/artifacts/homekit-server.md +106 -0
  208. package/docs/safety-index/artifacts/hotel-booking-server.json +66 -0
  209. package/docs/safety-index/artifacts/hotel-booking-server.md +106 -0
  210. package/docs/safety-index/artifacts/hubspot-mcp-server.json +66 -0
  211. package/docs/safety-index/artifacts/hubspot-mcp-server.md +106 -0
  212. package/docs/safety-index/artifacts/huggingface-server.json +4 -4
  213. package/docs/safety-index/artifacts/huggingface-server.md +3 -3
  214. package/docs/safety-index/artifacts/indian-food-nutrition-mcp.json +663 -0
  215. package/docs/safety-index/artifacts/indian-food-nutrition-mcp.md +211 -0
  216. package/docs/safety-index/artifacts/irctc-mcp.json +66 -0
  217. package/docs/safety-index/artifacts/irctc-mcp.md +106 -0
  218. package/docs/safety-index/artifacts/jazz-mcp.json +66 -0
  219. package/docs/safety-index/artifacts/jazz-mcp.md +106 -0
  220. package/docs/safety-index/artifacts/jazzcash-mcp.json +66 -0
  221. package/docs/safety-index/artifacts/jazzcash-mcp.md +102 -0
  222. package/docs/safety-index/artifacts/jina-server.json +4 -4
  223. package/docs/safety-index/artifacts/jina-server.md +3 -3
  224. package/docs/safety-index/artifacts/jira-mcp-server.json +66 -0
  225. package/docs/safety-index/artifacts/jira-mcp-server.md +104 -0
  226. package/docs/safety-index/artifacts/k2-mcp.json +66 -0
  227. package/docs/safety-index/artifacts/k2-mcp.md +106 -0
  228. package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.json +67 -0
  229. package/docs/safety-index/artifacts/karachi-stock-exchange-mcp.md +114 -0
  230. package/docs/safety-index/artifacts/khan-academy-server.json +66 -0
  231. package/docs/safety-index/artifacts/khan-academy-server.md +106 -0
  232. package/docs/safety-index/artifacts/kubernetes-server.json +104 -34
  233. package/docs/safety-index/artifacts/kubernetes-server.md +25 -21
  234. package/docs/safety-index/artifacts/langfuse-mcp.json +66 -0
  235. package/docs/safety-index/artifacts/langfuse-mcp.md +106 -0
  236. package/docs/safety-index/artifacts/linear-server.json +18 -18
  237. package/docs/safety-index/artifacts/linear-server.md +8 -8
  238. package/docs/safety-index/artifacts/mapmyindia-mcp.json +66 -0
  239. package/docs/safety-index/artifacts/mapmyindia-mcp.md +106 -0
  240. package/docs/safety-index/artifacts/memory-server.json +18 -18
  241. package/docs/safety-index/artifacts/memory-server.md +11 -11
  242. package/docs/safety-index/artifacts/minecraft-server.json +592 -0
  243. package/docs/safety-index/artifacts/minecraft-server.md +186 -0
  244. package/docs/safety-index/artifacts/mls-server.json +66 -0
  245. package/docs/safety-index/artifacts/mls-server.md +106 -0
  246. package/docs/safety-index/artifacts/mongodb-server.json +4 -4
  247. package/docs/safety-index/artifacts/mongodb-server.md +4 -4
  248. package/docs/safety-index/artifacts/mui-mcp-server.json +419 -0
  249. package/docs/safety-index/artifacts/mui-mcp-server.md +208 -0
  250. package/docs/safety-index/artifacts/mysql-mcp-server.json +66 -0
  251. package/docs/safety-index/artifacts/mysql-mcp-server.md +106 -0
  252. package/docs/safety-index/artifacts/nadra-mcp.json +66 -0
  253. package/docs/safety-index/artifacts/nadra-mcp.md +106 -0
  254. package/docs/safety-index/artifacts/neon-server.json +4 -4
  255. package/docs/safety-index/artifacts/neon-server.md +3 -3
  256. package/docs/safety-index/artifacts/notion-server.json +18 -18
  257. package/docs/safety-index/artifacts/notion-server.md +10 -10
  258. package/docs/safety-index/artifacts/obsidian-mcp.json +66 -0
  259. package/docs/safety-index/artifacts/obsidian-mcp.md +106 -0
  260. package/docs/safety-index/artifacts/ola-maps-mcp.json +66 -0
  261. package/docs/safety-index/artifacts/ola-maps-mcp.md +106 -0
  262. package/docs/safety-index/artifacts/olx-pakistan-mcp.json +66 -0
  263. package/docs/safety-index/artifacts/olx-pakistan-mcp.md +106 -0
  264. package/docs/safety-index/artifacts/onesignal-server.json +4 -4
  265. package/docs/safety-index/artifacts/onesignal-server.md +3 -3
  266. package/docs/safety-index/artifacts/openai-mcp-server.json +66 -0
  267. package/docs/safety-index/artifacts/openai-mcp-server.md +106 -0
  268. package/docs/safety-index/artifacts/opentofu-server.json +19 -19
  269. package/docs/safety-index/artifacts/opentofu-server.md +10 -10
  270. package/docs/safety-index/artifacts/openweather-server.json +66 -0
  271. package/docs/safety-index/artifacts/openweather-server.md +106 -0
  272. package/docs/safety-index/artifacts/pakistan-cricket-mcp.json +66 -0
  273. package/docs/safety-index/artifacts/pakistan-cricket-mcp.md +106 -0
  274. package/docs/safety-index/artifacts/pakistan-post-mcp.json +66 -0
  275. package/docs/safety-index/artifacts/pakistan-post-mcp.md +106 -0
  276. package/docs/safety-index/artifacts/pakistan-weather-mcp.json +66 -0
  277. package/docs/safety-index/artifacts/pakistan-weather-mcp.md +106 -0
  278. package/docs/safety-index/artifacts/pakwheels-mcp.json +66 -0
  279. package/docs/safety-index/artifacts/pakwheels-mcp.md +106 -0
  280. package/docs/safety-index/artifacts/paytm-mcp.json +66 -0
  281. package/docs/safety-index/artifacts/paytm-mcp.md +106 -0
  282. package/docs/safety-index/artifacts/perplexity-mcp.json +66 -0
  283. package/docs/safety-index/artifacts/perplexity-mcp.md +106 -0
  284. package/docs/safety-index/artifacts/pims-mcp.json +66 -0
  285. package/docs/safety-index/artifacts/pims-mcp.md +106 -0
  286. package/docs/safety-index/artifacts/playwright-mcp-server.json +18 -18
  287. package/docs/safety-index/artifacts/playwright-mcp-server.md +8 -8
  288. package/docs/safety-index/artifacts/postgres-server.json +19 -19
  289. package/docs/safety-index/artifacts/postgres-server.md +9 -9
  290. package/docs/safety-index/artifacts/postman-india-region.json +66 -0
  291. package/docs/safety-index/artifacts/postman-india-region.md +102 -0
  292. package/docs/safety-index/artifacts/postman-mcp-server.json +66 -0
  293. package/docs/safety-index/artifacts/postman-mcp-server.md +102 -0
  294. package/docs/safety-index/artifacts/promptopia-server.json +21 -21
  295. package/docs/safety-index/artifacts/promptopia-server.md +11 -11
  296. package/docs/safety-index/artifacts/pubmed-mcp-server.json +58 -0
  297. package/docs/safety-index/artifacts/pubmed-mcp-server.md +96 -0
  298. package/docs/safety-index/artifacts/punjab-health-mcp.json +66 -0
  299. package/docs/safety-index/artifacts/punjab-health-mcp.md +106 -0
  300. package/docs/safety-index/artifacts/puppeteer-server.json +18 -18
  301. package/docs/safety-index/artifacts/puppeteer-server.md +9 -9
  302. package/docs/safety-index/artifacts/qase-server.json +7055 -0
  303. package/docs/safety-index/artifacts/qase-server.md +329 -0
  304. package/docs/safety-index/artifacts/qdrant-server.json +4 -4
  305. package/docs/safety-index/artifacts/qdrant-server.md +4 -4
  306. package/docs/safety-index/artifacts/raspberrypi-server.json +66 -0
  307. package/docs/safety-index/artifacts/raspberrypi-server.md +106 -0
  308. package/docs/safety-index/artifacts/razorpay-mcp.json +66 -0
  309. package/docs/safety-index/artifacts/razorpay-mcp.md +103 -0
  310. package/docs/safety-index/artifacts/reddit-server.json +4 -4
  311. package/docs/safety-index/artifacts/reddit-server.md +3 -3
  312. package/docs/safety-index/artifacts/redis-server.json +66 -0
  313. package/docs/safety-index/artifacts/redis-server.md +106 -0
  314. package/docs/safety-index/artifacts/ref-tools-server.json +18 -18
  315. package/docs/safety-index/artifacts/ref-tools-server.md +8 -8
  316. package/docs/safety-index/artifacts/resend-mcp.json +66 -0
  317. package/docs/safety-index/artifacts/resend-mcp.md +102 -0
  318. package/docs/safety-index/artifacts/rozgar-mcp.json +66 -0
  319. package/docs/safety-index/artifacts/rozgar-mcp.md +106 -0
  320. package/docs/safety-index/artifacts/s3-mcp-server.json +467 -0
  321. package/docs/safety-index/artifacts/s3-mcp-server.md +209 -0
  322. package/docs/safety-index/artifacts/salesforce-mcp-server.json +66 -0
  323. package/docs/safety-index/artifacts/salesforce-mcp-server.md +106 -0
  324. package/docs/safety-index/artifacts/sehat-sahulat-mcp.json +66 -0
  325. package/docs/safety-index/artifacts/sehat-sahulat-mcp.md +106 -0
  326. package/docs/safety-index/artifacts/sendgrid-mcp.json +66 -0
  327. package/docs/safety-index/artifacts/sendgrid-mcp.md +106 -0
  328. package/docs/safety-index/artifacts/sentry-server.json +3 -3
  329. package/docs/safety-index/artifacts/sentry-server.md +2 -2
  330. package/docs/safety-index/artifacts/sequential-thinking-server.json +18 -18
  331. package/docs/safety-index/artifacts/sequential-thinking-server.md +8 -8
  332. package/docs/safety-index/artifacts/shopify-mcp-server.json +66 -0
  333. package/docs/safety-index/artifacts/shopify-mcp-server.md +106 -0
  334. package/docs/safety-index/artifacts/shopify-mcp.json +66 -0
  335. package/docs/safety-index/artifacts/shopify-mcp.md +106 -0
  336. package/docs/safety-index/artifacts/shortcut-mcp-server.json +66 -0
  337. package/docs/safety-index/artifacts/shortcut-mcp-server.md +102 -0
  338. package/docs/safety-index/artifacts/slack-server.json +3 -3
  339. package/docs/safety-index/artifacts/slack-server.md +2 -2
  340. package/docs/safety-index/artifacts/smartbear-mcp-server.json +21483 -0
  341. package/docs/safety-index/artifacts/smartbear-mcp-server.md +900 -0
  342. package/docs/safety-index/artifacts/spotify-mcp.json +2071 -0
  343. package/docs/safety-index/artifacts/spotify-mcp.md +237 -0
  344. package/docs/safety-index/artifacts/spotify-server.json +66 -0
  345. package/docs/safety-index/artifacts/spotify-server.md +106 -0
  346. package/docs/safety-index/artifacts/sqlite-server.json +4 -4
  347. package/docs/safety-index/artifacts/sqlite-server.md +3 -3
  348. package/docs/safety-index/artifacts/stable-diffusion-server.json +66 -0
  349. package/docs/safety-index/artifacts/stable-diffusion-server.md +106 -0
  350. package/docs/safety-index/artifacts/stock-nse-india.json +66 -0
  351. package/docs/safety-index/artifacts/stock-nse-india.md +106 -0
  352. package/docs/safety-index/artifacts/storybook-mcp-server.json +66 -0
  353. package/docs/safety-index/artifacts/storybook-mcp-server.md +103 -0
  354. package/docs/safety-index/artifacts/stripe-server.json +3 -3
  355. package/docs/safety-index/artifacts/stripe-server.md +2 -2
  356. package/docs/safety-index/artifacts/supabase-server.json +3 -3
  357. package/docs/safety-index/artifacts/supabase-server.md +2 -2
  358. package/docs/safety-index/artifacts/tavily-search-server.json +4 -4
  359. package/docs/safety-index/artifacts/tavily-search-server.md +3 -3
  360. package/docs/safety-index/artifacts/telegram-mcp-server.json +66 -0
  361. package/docs/safety-index/artifacts/telegram-mcp-server.md +103 -0
  362. package/docs/safety-index/artifacts/telenor-pakistan-mcp.json +66 -0
  363. package/docs/safety-index/artifacts/telenor-pakistan-mcp.md +106 -0
  364. package/docs/safety-index/artifacts/textlocal-mcp.json +66 -0
  365. package/docs/safety-index/artifacts/textlocal-mcp.md +106 -0
  366. package/docs/safety-index/artifacts/tooljet-mcp.json +66 -0
  367. package/docs/safety-index/artifacts/tooljet-mcp.md +106 -0
  368. package/docs/safety-index/artifacts/transcend-server.json +3438 -0
  369. package/docs/safety-index/artifacts/transcend-server.md +277 -0
  370. package/docs/safety-index/artifacts/trello-mcp-server.json +916 -0
  371. package/docs/safety-index/artifacts/trello-mcp-server.md +211 -0
  372. package/docs/safety-index/artifacts/twilio-mcp.json +66 -0
  373. package/docs/safety-index/artifacts/twilio-mcp.md +106 -0
  374. package/docs/safety-index/artifacts/udyam-mcp.json +66 -0
  375. package/docs/safety-index/artifacts/udyam-mcp.md +106 -0
  376. package/docs/safety-index/artifacts/ufone-mcp.json +66 -0
  377. package/docs/safety-index/artifacts/ufone-mcp.md +106 -0
  378. package/docs/safety-index/artifacts/ui5-mcp-server.json +21 -21
  379. package/docs/safety-index/artifacts/ui5-mcp-server.md +10 -10
  380. package/docs/safety-index/artifacts/unity-server.json +66 -0
  381. package/docs/safety-index/artifacts/unity-server.md +102 -0
  382. package/docs/safety-index/artifacts/upi-mcp.json +452 -0
  383. package/docs/safety-index/artifacts/upi-mcp.md +201 -0
  384. package/docs/safety-index/artifacts/vercel-ai-server.json +4 -4
  385. package/docs/safety-index/artifacts/vercel-ai-server.md +4 -4
  386. package/docs/safety-index/artifacts/vimeo-server.json +66 -0
  387. package/docs/safety-index/artifacts/vimeo-server.md +106 -0
  388. package/docs/safety-index/artifacts/weather-server.json +66 -0
  389. package/docs/safety-index/artifacts/weather-server.md +106 -0
  390. package/docs/safety-index/artifacts/whatsapp-business-mcp.json +66 -0
  391. package/docs/safety-index/artifacts/whatsapp-business-mcp.md +106 -0
  392. package/docs/safety-index/artifacts/whatsapp-mcp-server.json +66 -0
  393. package/docs/safety-index/artifacts/whatsapp-mcp-server.md +106 -0
  394. package/docs/safety-index/artifacts/whatsapp-mcp.json +66 -0
  395. package/docs/safety-index/artifacts/whatsapp-mcp.md +106 -0
  396. package/docs/safety-index/artifacts/yahoo-finance-server.json +626 -0
  397. package/docs/safety-index/artifacts/yahoo-finance-server.md +187 -0
  398. package/docs/safety-index/artifacts/youtube-mcp-server.json +58 -0
  399. package/docs/safety-index/artifacts/youtube-mcp-server.md +96 -0
  400. package/docs/safety-index/artifacts/youtube-server.json +66 -0
  401. package/docs/safety-index/artifacts/youtube-server.md +103 -0
  402. package/docs/safety-index/artifacts/zendesk-mcp.json +66 -0
  403. package/docs/safety-index/artifacts/zendesk-mcp.md +106 -0
  404. package/docs/safety-index/artifacts/zillow-server.json +66 -0
  405. package/docs/safety-index/artifacts/zillow-server.md +102 -0
  406. package/docs/safety-index/artifacts/zong-mcp.json +66 -0
  407. package/docs/safety-index/artifacts/zong-mcp.md +106 -0
  408. package/docs/safety-index/targets.json +2145 -20
  409. package/package.json +10 -9
@@ -0,0 +1,209 @@
1
+ # MCP Observatory Run Report
2
+
3
+ Generated at 2026-07-15T22:34:48.113Z
4
+
5
+ ## Target and Environment Metadata
6
+
7
+ - Target: `s3-mcp-server`
8
+ - Adapter: `local-process`
9
+ - Command: `npx -y mcp-server-s3`
10
+ - Server: `mcp-server-s3 1.0.0`
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
+
14
+ ## Executive Summary
15
+
16
+ **Health Score: 93/100 (A)**
17
+
18
+ | Dimension | Score | Weight |
19
+ | --- | --- | --- |
20
+ | Protocol Compliance | 100/100 | 30% |
21
+ | Schema Quality | 100/100 | 20% |
22
+ | Security | 100/100 | 20% |
23
+ | Reliability | 67/100 | 20% |
24
+ | Performance | 100/100 | 10% |
25
+
26
+ | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
27
+ | --- | --- | --- | --- | --- | --- | --- | --- |
28
+ | pass | 9 | 7 | 0 | 0 | 2 | 0 | 0 |
29
+
30
+ ## At a Glance
31
+
32
+ - Safety verdict: **Needs review** — The server is usable, but caveated checks should be reviewed before agents depend on it.
33
+ - Top risks: No high-priority risks detected.
34
+ - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
35
+ - Failing checks: none
36
+ - Partial or flaky checks: none
37
+ - Skipped checks: none
38
+ - Unsupported checks: prompts, resources
39
+ - Suggested next step: Confirm that unsupported capabilities are intentional for this target: prompts, resources.
40
+ - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
41
+
42
+ ## What Was Not Tested
43
+
44
+ - â„šī¸ credential_access: Credential scanning was performed (see security findings)
45
+ - â„šī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
46
+
47
+ ## Runtime Profile
48
+
49
+ ### Egress Manifest
50
+
51
+ The following targets were identified as potentially reachable by this server (confidence: **medium**):
52
+
53
+ | Target | Protocol | Source | Confidence |
54
+ | --- | --- | --- | --- |
55
+ | URL expiry in seconds (default: 1 hour) | unknown | description_analysis | medium |
56
+ | presigned_url | unknown | description_analysis | low |
57
+
58
+ ### State Mutations
59
+
60
+ The following state-modifying operations were identified from tool schemas:
61
+
62
+ | Resource | Operation | Scope | Source |
63
+ | --- | --- | --- | --- |
64
+ | filesystem | write | working_directory | description_analysis |
65
+ | filesystem | delete | working_directory | description_analysis |
66
+
67
+ _Analyzed at 2026-07-15T22:34:48.941Z_
68
+
69
+ ## Regressions and Recoveries
70
+
71
+ _Use the `diff` command against another run artifact to classify regressions and recoveries over time._
72
+
73
+ ## Full Capability Status Table
74
+
75
+ | Focus | Check | Status | Duration (ms) | Message |
76
+ | --- | --- | --- | --- | --- |
77
+ | healthy | attack-sim | pass | 2.72 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
78
+ | healthy | conformance | pass | 2022.83 | All 7 conformance checks passed. |
79
+ | healthy | runtime-profile | pass | 0.08 | Detected 2 potential egress target(s) and 2 potential state mutation(s) with low confidence. |
80
+ | healthy | schema-quality | pass | 2.23 | All 7 item(s) have good schema quality. |
81
+ | healthy | security | pass | 1.46 | No security issues detected. |
82
+ | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
83
+ | healthy | tools | pass | 2.57 | Advertised capability responded with the minimal expected shape (7 items). |
84
+ | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
85
+ | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
86
+
87
+ ## Evidence Snippets
88
+
89
+ ### attack-sim — pass
90
+
91
+ Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
92
+
93
+ - Endpoint: `attack-sim/safe`
94
+ - Advertised: `true`
95
+ - Responded: `true`
96
+ - Minimal shape present: `true`
97
+ - Item count: `0`
98
+ - Identifiers: none
99
+ - Diagnostics: none
100
+
101
+ ### conformance — pass
102
+
103
+ Summary: All 7 conformance checks passed.
104
+
105
+ - Endpoint: `conformance/check`
106
+ - Advertised: `true`
107
+ - Responded: `true`
108
+ - Minimal shape present: `true`
109
+ - Item count: `7`
110
+ - Identifiers: none
111
+ - Diagnostics: [pass] capabilities-present: Server returned capabilities object., [pass] server-info: Server provided initialization info., [pass] tools-capability-match: tools/list returned 7 tool(s). (+4 more)
112
+
113
+ ### runtime-profile — pass
114
+
115
+ Summary: Detected 2 potential egress target(s) and 2 potential state mutation(s) with low confidence.
116
+
117
+ - Endpoint: `runtime-profile/analyze`
118
+ - Advertised: `true`
119
+ - Responded: `true`
120
+ - Minimal shape present: `true`
121
+ - Item count: `4`
122
+ - Identifiers: none
123
+ - Diagnostics: Egress entries: 2, State mutations: 2, Confidence: medium
124
+
125
+ ### schema-quality — pass
126
+
127
+ Summary: All 7 item(s) have good schema quality.
128
+
129
+ - Endpoint: `schema-quality/scan`
130
+ - Advertised: `true`
131
+ - Responded: `true`
132
+ - Minimal shape present: `true`
133
+ - Item count: `0`
134
+ - Identifiers: none
135
+ - Diagnostics: none
136
+
137
+ ### security — pass
138
+
139
+ Summary: No security issues detected.
140
+
141
+ - Endpoint: `security/scan`
142
+ - Advertised: `true`
143
+ - Responded: `true`
144
+ - Minimal shape present: `true`
145
+ - Item count: `0`
146
+ - Identifiers: none
147
+ - Diagnostics: none
148
+
149
+ ### security-lite — pass
150
+
151
+ Summary: No security issues detected (lightweight scan).
152
+
153
+ - Endpoint: `security/scan-lite`
154
+ - Advertised: `true`
155
+ - Responded: `true`
156
+ - Minimal shape present: `true`
157
+ - Item count: `0`
158
+ - Identifiers: none
159
+ - Diagnostics: none
160
+
161
+ ### tools — pass
162
+
163
+ Summary: Advertised capability responded with the minimal expected shape (7 items).
164
+
165
+ - Endpoint: `tools/list`
166
+ - Advertised: `true`
167
+ - Responded: `true`
168
+ - Minimal shape present: `true`
169
+ - Item count: `7`
170
+ - Identifiers: list_buckets, list_objects, get_object, put_object, delete_object (+2 more)
171
+ - Diagnostics: none
172
+
173
+ ### prompts — unsupported
174
+
175
+ Summary: Prompts are not advertised by the target.
176
+
177
+ - Endpoint: `prompts/list`
178
+ - Advertised: `false`
179
+ - Responded: `false`
180
+ - Minimal shape present: `false`
181
+ - Item count: `0`
182
+ - Identifiers: none
183
+ - Diagnostics: none
184
+
185
+ ### resources — unsupported
186
+
187
+ Summary: Resources are not advertised by the target.
188
+
189
+ - Endpoint: `resources/list | resources/templates/list`
190
+ - Advertised: `false`
191
+ - Responded: `false`
192
+ - Minimal shape present: `false`
193
+ - Item count: `0`
194
+ - Identifiers: none
195
+ - Diagnostics: none
196
+
197
+ ## Reproduction Commands
198
+
199
+ ```bash
200
+ npm run cli -- run --target <path-to-target-config.json>
201
+ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
202
+ ```
203
+
204
+ ## Artifact Provenance
205
+
206
+ - Artifact type: `run`
207
+ - Schema version: `1.0.0`
208
+ - Run ID: `run_2026-07-15T223448113Z_d07bd219`
209
+ - Gate: `pass`
@@ -0,0 +1,66 @@
1
+ {
2
+ "artifactType": "run",
3
+ "schemaVersion": "1.0.0",
4
+ "gate": "fail",
5
+ "runId": "run_2026-07-15T223423896Z_83af13af",
6
+ "createdAt": "2026-07-15T22:34:23.897Z",
7
+ "toolVersion": "1.32.1",
8
+ "target": {
9
+ "targetId": "salesforce-mcp-server",
10
+ "adapter": "local-process",
11
+ "command": "npx",
12
+ "args": [
13
+ "-y",
14
+ "@salesforce/mcp"
15
+ ],
16
+ "cwd": ".",
17
+ "metadata": {
18
+ "package": "@salesforce/mcp",
19
+ "purpose": "mcp-safety-index",
20
+ "riskClass": "CRM data and org control",
21
+ "failureClass": "Record/org/metadata boundary",
22
+ "whyItMatters": "Salesforce MCP servers can read, create, and update CRM records, metadata, and org configuration — high-stakes customer data access."
23
+ }
24
+ },
25
+ "environment": {
26
+ "platform": "darwin 25.5.0",
27
+ "nodeVersion": "v22.22.1"
28
+ },
29
+ "summary": {
30
+ "total": 3,
31
+ "pass": 0,
32
+ "fail": 0,
33
+ "partial": 0,
34
+ "unsupported": 0,
35
+ "flaky": 0,
36
+ "skipped": 3,
37
+ "gate": "fail"
38
+ },
39
+ "checks": [
40
+ {
41
+ "id": "tools",
42
+ "capability": "tools",
43
+ "status": "skipped",
44
+ "durationMs": 0,
45
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
46
+ "evidence": []
47
+ },
48
+ {
49
+ "id": "prompts",
50
+ "capability": "prompts",
51
+ "status": "skipped",
52
+ "durationMs": 0,
53
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
54
+ "evidence": []
55
+ },
56
+ {
57
+ "id": "resources",
58
+ "capability": "resources",
59
+ "status": "skipped",
60
+ "durationMs": 0,
61
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
62
+ "evidence": []
63
+ }
64
+ ],
65
+ "fatalError": "Could not establish a plain stdio MCP session for target `salesforce-mcp-server`.\nCommand: npx -y @salesforce/mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- â€ē providing services or functions that are relevant to use of the MCP server\n- â€ē and product improvements.\n- â€ē Error: The following error occurred:\n- â€ē Missing required flag orgs\n- â€ē See more help with --help"
66
+ }
@@ -0,0 +1,106 @@
1
+ # MCP Observatory Run Report
2
+
3
+ Generated at 2026-07-15T22:34:23.897Z
4
+
5
+ ## Target and Environment Metadata
6
+
7
+ - Target: `salesforce-mcp-server`
8
+ - Adapter: `local-process`
9
+ - Command: `npx -y @salesforce/mcp`
10
+ - Server: `unknown `
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
+
14
+ ## Executive Summary
15
+
16
+ | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
17
+ | --- | --- | --- | --- | --- | --- | --- | --- |
18
+ | fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
19
+
20
+ ## At a Glance
21
+
22
+ - Safety verdict: **Blocked** — One or more checks can break agent dependence and should be fixed before production use.
23
+ - Top risks: startup: server failed to start
24
+ - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
25
+ - Failing checks: none
26
+ - Partial or flaky checks: none
27
+ - Skipped checks: tools, prompts, resources
28
+ - Unsupported checks: none
29
+ - Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
30
+ - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
31
+
32
+ ## What Was Not Tested
33
+
34
+ - 🔒 network_egress: No outbound network calls were attempted during scan
35
+ - 🔒 filesystem_mutation: Filesystem write operations were not exercised
36
+ - 🔒 credential_access: Credential scanning was not performed
37
+ - â„šī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
38
+
39
+ ## Regressions and Recoveries
40
+
41
+ _Use the `diff` command against another run artifact to classify regressions and recoveries over time._
42
+
43
+ ## Failure Diagnosis
44
+
45
+ ```text
46
+ Could not establish a plain stdio MCP session for target `salesforce-mcp-server`.
47
+ Command: npx -y @salesforce/mcp
48
+ Diagnosis: The process exited or detached before MCP initialization completed.
49
+ Raw error: MCP error -32000: Connection closed
50
+ Likely causes:
51
+ - The package may expect extra startup arguments or environment variables.
52
+ - The package may not behave like a plain local-process stdio target under this invocation.
53
+ - The server may be crashing immediately and only leaving clues on stderr.
54
+ Next steps:
55
+ - Run the command manually and look for usage output, auth prompts, or crash text.
56
+ - Check whether the package expects a different transport or an app-oriented startup flow.
57
+ - Use the recent stderr lines below before assuming this is a harness bug.
58
+ Recent stderr:
59
+ - â€ē providing services or functions that are relevant to use of the MCP server
60
+ - â€ē and product improvements.
61
+ - â€ē Error: The following error occurred:
62
+ - â€ē Missing required flag orgs
63
+ - â€ē See more help with --help
64
+ ```
65
+
66
+ ## Full Capability Status Table
67
+
68
+ | Focus | Check | Status | Duration (ms) | Message |
69
+ | --- | --- | --- | --- | --- |
70
+ | inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
71
+ | inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
72
+ | inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
73
+
74
+ ## Evidence Snippets
75
+
76
+ ### prompts — skipped
77
+
78
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
79
+
80
+ _No evidence was captured._
81
+
82
+ ### resources — skipped
83
+
84
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
85
+
86
+ _No evidence was captured._
87
+
88
+ ### tools — skipped
89
+
90
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
91
+
92
+ _No evidence was captured._
93
+
94
+ ## Reproduction Commands
95
+
96
+ ```bash
97
+ npm run cli -- run --target <path-to-target-config.json>
98
+ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
99
+ ```
100
+
101
+ ## Artifact Provenance
102
+
103
+ - Artifact type: `run`
104
+ - Schema version: `1.0.0`
105
+ - Run ID: `run_2026-07-15T223423896Z_83af13af`
106
+ - Gate: `fail`
@@ -0,0 +1,66 @@
1
+ {
2
+ "artifactType": "run",
3
+ "schemaVersion": "1.0.0",
4
+ "gate": "fail",
5
+ "runId": "run_2026-07-15T223548818Z_d88c729f",
6
+ "createdAt": "2026-07-15T22:35:48.818Z",
7
+ "toolVersion": "1.32.1",
8
+ "target": {
9
+ "targetId": "sehat-sahulat-mcp",
10
+ "adapter": "local-process",
11
+ "command": "npx",
12
+ "args": [
13
+ "-y",
14
+ "sehat-sahulat-mcp"
15
+ ],
16
+ "cwd": ".",
17
+ "metadata": {
18
+ "package": "sehat-sahulat-mcp",
19
+ "purpose": "mcp-safety-index",
20
+ "riskClass": "Public health insurance API access",
21
+ "failureClass": "Insurance claim/beneficiary boundary",
22
+ "whyItMatters": "Pakistan's Sehat Sahulat program covers 100M+ citizens with cashless health insurance. MCP servers accessing beneficiary records, hospital empanelment, and claims data handle the country's largest public healthcare dataset."
23
+ }
24
+ },
25
+ "environment": {
26
+ "platform": "darwin 25.5.0",
27
+ "nodeVersion": "v22.22.1"
28
+ },
29
+ "summary": {
30
+ "total": 3,
31
+ "pass": 0,
32
+ "fail": 0,
33
+ "partial": 0,
34
+ "unsupported": 0,
35
+ "flaky": 0,
36
+ "skipped": 3,
37
+ "gate": "fail"
38
+ },
39
+ "checks": [
40
+ {
41
+ "id": "tools",
42
+ "capability": "tools",
43
+ "status": "skipped",
44
+ "durationMs": 0,
45
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
46
+ "evidence": []
47
+ },
48
+ {
49
+ "id": "prompts",
50
+ "capability": "prompts",
51
+ "status": "skipped",
52
+ "durationMs": 0,
53
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
54
+ "evidence": []
55
+ },
56
+ {
57
+ "id": "resources",
58
+ "capability": "resources",
59
+ "status": "skipped",
60
+ "durationMs": 0,
61
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
62
+ "evidence": []
63
+ }
64
+ ],
65
+ "fatalError": "Could not establish a plain stdio MCP session for target `sehat-sahulat-mcp`.\nCommand: npx -y sehat-sahulat-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 'sehat-sahulat-mcp@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_48_899Z-debug-0.log"
66
+ }
@@ -0,0 +1,106 @@
1
+ # MCP Observatory Run Report
2
+
3
+ Generated at 2026-07-15T22:35:48.818Z
4
+
5
+ ## Target and Environment Metadata
6
+
7
+ - Target: `sehat-sahulat-mcp`
8
+ - Adapter: `local-process`
9
+ - Command: `npx -y sehat-sahulat-mcp`
10
+ - Server: `unknown `
11
+ - Platform: `darwin 25.5.0`
12
+ - Node: `v22.22.1`
13
+
14
+ ## Executive Summary
15
+
16
+ | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
17
+ | --- | --- | --- | --- | --- | --- | --- | --- |
18
+ | fail | 3 | 0 | 0 | 0 | 0 | 0 | 3 |
19
+
20
+ ## At a Glance
21
+
22
+ - Safety verdict: **Blocked** — One or more checks can break agent dependence and should be fixed before production use.
23
+ - Top risks: startup: server failed to start
24
+ - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
25
+ - Failing checks: none
26
+ - Partial or flaky checks: none
27
+ - Skipped checks: tools, prompts, resources
28
+ - Unsupported checks: none
29
+ - Suggested next step: Run the target command manually, compare stderr with the diagnosis below, and only raise timeoutMs if startup is genuinely slow.
30
+ - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
31
+
32
+ ## What Was Not Tested
33
+
34
+ - 🔒 network_egress: No outbound network calls were attempted during scan
35
+ - 🔒 filesystem_mutation: Filesystem write operations were not exercised
36
+ - 🔒 credential_access: Credential scanning was not performed
37
+ - â„šī¸ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
38
+
39
+ ## Regressions and Recoveries
40
+
41
+ _Use the `diff` command against another run artifact to classify regressions and recoveries over time._
42
+
43
+ ## Failure Diagnosis
44
+
45
+ ```text
46
+ Could not establish a plain stdio MCP session for target `sehat-sahulat-mcp`.
47
+ Command: npx -y sehat-sahulat-mcp
48
+ Diagnosis: The process exited or detached before MCP initialization completed.
49
+ Raw error: MCP error -32000: Connection closed
50
+ Likely causes:
51
+ - The package may expect extra startup arguments or environment variables.
52
+ - The package may not behave like a plain local-process stdio target under this invocation.
53
+ - The server may be crashing immediately and only leaving clues on stderr.
54
+ Next steps:
55
+ - Run the command manually and look for usage output, auth prompts, or crash text.
56
+ - Check whether the package expects a different transport or an app-oriented startup flow.
57
+ - Use the recent stderr lines below before assuming this is a harness bug.
58
+ Recent stderr:
59
+ - npm error 404 'sehat-sahulat-mcp@*' is not in this registry.
60
+ - npm error 404
61
+ - npm error 404 Note that you can also install from a
62
+ - npm error 404 tarball, folder, http url, or git url.
63
+ - npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_35_48_899Z-debug-0.log
64
+ ```
65
+
66
+ ## Full Capability Status Table
67
+
68
+ | Focus | Check | Status | Duration (ms) | Message |
69
+ | --- | --- | --- | --- | --- |
70
+ | inspect startup | prompts | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
71
+ | inspect startup | resources | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
72
+ | inspect startup | tools | skipped | 0.00 | Skipped because startup failed before the MCP session initialized. See the failure diagnosis. |
73
+
74
+ ## Evidence Snippets
75
+
76
+ ### prompts — skipped
77
+
78
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
79
+
80
+ _No evidence was captured._
81
+
82
+ ### resources — skipped
83
+
84
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
85
+
86
+ _No evidence was captured._
87
+
88
+ ### tools — skipped
89
+
90
+ Summary: Skipped because startup failed before the MCP session initialized. See the failure diagnosis.
91
+
92
+ _No evidence was captured._
93
+
94
+ ## Reproduction Commands
95
+
96
+ ```bash
97
+ npm run cli -- run --target <path-to-target-config.json>
98
+ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
99
+ ```
100
+
101
+ ## Artifact Provenance
102
+
103
+ - Artifact type: `run`
104
+ - Schema version: `1.0.0`
105
+ - Run ID: `run_2026-07-15T223548818Z_d88c729f`
106
+ - Gate: `fail`
@@ -0,0 +1,66 @@
1
+ {
2
+ "artifactType": "run",
3
+ "schemaVersion": "1.0.0",
4
+ "gate": "fail",
5
+ "runId": "run_2026-07-15T223454145Z_5d8dbd75",
6
+ "createdAt": "2026-07-15T22:34:54.145Z",
7
+ "toolVersion": "1.32.1",
8
+ "target": {
9
+ "targetId": "sendgrid-mcp",
10
+ "adapter": "local-process",
11
+ "command": "npx",
12
+ "args": [
13
+ "-y",
14
+ "sendgrid-mcp"
15
+ ],
16
+ "cwd": ".",
17
+ "metadata": {
18
+ "package": "sendgrid-mcp",
19
+ "purpose": "mcp-safety-index",
20
+ "riskClass": "Email sending platform access",
21
+ "failureClass": "Email send/template boundary",
22
+ "whyItMatters": "SendGrid MCP servers can send transactional and marketing emails, manage templates, and view delivery stats — agents could email users at scale."
23
+ }
24
+ },
25
+ "environment": {
26
+ "platform": "darwin 25.5.0",
27
+ "nodeVersion": "v22.22.1"
28
+ },
29
+ "summary": {
30
+ "total": 3,
31
+ "pass": 0,
32
+ "fail": 0,
33
+ "partial": 0,
34
+ "unsupported": 0,
35
+ "flaky": 0,
36
+ "skipped": 3,
37
+ "gate": "fail"
38
+ },
39
+ "checks": [
40
+ {
41
+ "id": "tools",
42
+ "capability": "tools",
43
+ "status": "skipped",
44
+ "durationMs": 0,
45
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
46
+ "evidence": []
47
+ },
48
+ {
49
+ "id": "prompts",
50
+ "capability": "prompts",
51
+ "status": "skipped",
52
+ "durationMs": 0,
53
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
54
+ "evidence": []
55
+ },
56
+ {
57
+ "id": "resources",
58
+ "capability": "resources",
59
+ "status": "skipped",
60
+ "durationMs": 0,
61
+ "message": "Skipped because startup failed before the MCP session initialized. See the failure diagnosis.",
62
+ "evidence": []
63
+ }
64
+ ],
65
+ "fatalError": "Could not establish a plain stdio MCP session for target `sendgrid-mcp`.\nCommand: npx -y sendgrid-mcp\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- at main (file:///Users/williamweishuhn/.npm/_npx/29b615f2cb2bb80b/node_modules/sendgrid-mcp/build/index.js:27:21)\n- at file:///Users/williamweishuhn/.npm/_npx/29b615f2cb2bb80b/node_modules/sendgrid-mcp/build/index.js:40:1\n- at ModuleJob.run (node:internal/modules/esm/module_job:343:25)\n- at async onImport.tracePromise.__proto__ (node:internal/modules/esm/loader:665:26)\n- at async asyncRunEntryPointWithESMLoader (node:internal/modules/run_main:117:5)"
66
+ }