@kryptosai/mcp-observatory 1.33.0 → 1.34.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (107) hide show
  1. package/README.md +8 -121
  2. package/dist/src/auth.d.ts +22 -0
  3. package/dist/src/auth.js +140 -0
  4. package/dist/src/auth.js.map +1 -0
  5. package/dist/src/cli.js +48 -3
  6. package/dist/src/cli.js.map +1 -1
  7. package/dist/src/commands/demo.d.ts +2 -0
  8. package/dist/src/commands/demo.js +247 -0
  9. package/dist/src/commands/demo.js.map +1 -0
  10. package/dist/src/commands/helpers.d.ts +11 -0
  11. package/dist/src/commands/helpers.js +26 -0
  12. package/dist/src/commands/helpers.js.map +1 -1
  13. package/dist/src/commands/init-ci.d.ts +1 -0
  14. package/dist/src/commands/init-ci.js +157 -10
  15. package/dist/src/commands/init-ci.js.map +1 -1
  16. package/dist/src/commands/receipt.js +13 -3
  17. package/dist/src/commands/receipt.js.map +1 -1
  18. package/dist/src/commands/scan.js +10 -1
  19. package/dist/src/commands/scan.js.map +1 -1
  20. package/dist/src/commands/setup-ci-conversion.js +4 -4
  21. package/dist/src/commands/setup-ci-conversion.js.map +1 -1
  22. package/dist/src/commands/test.js +9 -1
  23. package/dist/src/commands/test.js.map +1 -1
  24. package/dist/src/commercial.d.ts +3 -0
  25. package/dist/src/commercial.js +12 -1
  26. package/dist/src/commercial.js.map +1 -1
  27. package/dist/src/index.d.ts +1 -1
  28. package/dist/src/index.js +1 -1
  29. package/dist/src/index.js.map +1 -1
  30. package/dist/src/receipt.d.ts +9 -0
  31. package/dist/src/receipt.js +24 -1
  32. package/dist/src/receipt.js.map +1 -1
  33. package/dist/src/telemetry.js +4 -0
  34. package/dist/src/telemetry.js.map +1 -1
  35. package/dist/src/utils/failure-diagnosis.d.ts +7 -0
  36. package/dist/src/utils/failure-diagnosis.js +14 -0
  37. package/dist/src/utils/failure-diagnosis.js.map +1 -1
  38. package/docs/mcp-server-safety-index.md +1 -1
  39. package/docs/safety-index/artifacts/antv-chart-server.json +21 -21
  40. package/docs/safety-index/artifacts/antv-chart-server.md +10 -10
  41. package/docs/safety-index/artifacts/browsermcp-server.json +18 -18
  42. package/docs/safety-index/artifacts/browsermcp-server.md +9 -9
  43. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +19 -19
  44. package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +9 -9
  45. package/docs/safety-index/artifacts/cloudflare-server.json +4 -4
  46. package/docs/safety-index/artifacts/cloudflare-server.md +4 -4
  47. package/docs/safety-index/artifacts/context7-server.json +18 -18
  48. package/docs/safety-index/artifacts/context7-server.md +10 -10
  49. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +34 -34
  50. package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +15 -15
  51. package/docs/safety-index/artifacts/everything-server.json +18 -18
  52. package/docs/safety-index/artifacts/everything-server.md +11 -11
  53. package/docs/safety-index/artifacts/executeautomation-playwright-server.json +19 -19
  54. package/docs/safety-index/artifacts/executeautomation-playwright-server.md +11 -11
  55. package/docs/safety-index/artifacts/filesystem-mcp-server.json +19 -19
  56. package/docs/safety-index/artifacts/filesystem-mcp-server.md +10 -10
  57. package/docs/safety-index/artifacts/filesystem-server.json +19 -19
  58. package/docs/safety-index/artifacts/filesystem-server.md +10 -10
  59. package/docs/safety-index/artifacts/github-mcp-server.json +18 -18
  60. package/docs/safety-index/artifacts/github-mcp-server.md +9 -9
  61. package/docs/safety-index/artifacts/google-drive-server.json +4 -4
  62. package/docs/safety-index/artifacts/google-drive-server.md +4 -4
  63. package/docs/safety-index/artifacts/kubernetes-server.json +23 -23
  64. package/docs/safety-index/artifacts/kubernetes-server.md +15 -15
  65. package/docs/safety-index/artifacts/memory-server.json +18 -18
  66. package/docs/safety-index/artifacts/memory-server.md +10 -10
  67. package/docs/safety-index/artifacts/mongodb-server.json +4 -4
  68. package/docs/safety-index/artifacts/mongodb-server.md +4 -4
  69. package/docs/safety-index/artifacts/opentofu-server.json +18 -18
  70. package/docs/safety-index/artifacts/opentofu-server.md +9 -9
  71. package/docs/safety-index/artifacts/playwright-mcp-server.json +18 -18
  72. package/docs/safety-index/artifacts/playwright-mcp-server.md +9 -9
  73. package/docs/safety-index/artifacts/promptopia-server.json +21 -21
  74. package/docs/safety-index/artifacts/promptopia-server.md +11 -11
  75. package/docs/safety-index/artifacts/puppeteer-server.json +18 -18
  76. package/docs/safety-index/artifacts/puppeteer-server.md +9 -9
  77. package/docs/safety-index/artifacts/qdrant-server.json +4 -4
  78. package/docs/safety-index/artifacts/qdrant-server.md +4 -4
  79. package/docs/safety-index/artifacts/ref-tools-server.json +18 -18
  80. package/docs/safety-index/artifacts/ref-tools-server.md +10 -10
  81. package/docs/safety-index/artifacts/sequential-thinking-server.json +18 -18
  82. package/docs/safety-index/artifacts/sequential-thinking-server.md +8 -8
  83. package/docs/safety-index/artifacts/slack-server.json +3 -3
  84. package/docs/safety-index/artifacts/slack-server.md +2 -2
  85. package/docs/safety-index/artifacts/ui5-mcp-server.json +18 -18
  86. package/docs/safety-index/artifacts/ui5-mcp-server.md +9 -9
  87. package/docs/safety-index/artifacts/vercel-ai-server.json +4 -4
  88. package/docs/safety-index/artifacts/vercel-ai-server.md +4 -4
  89. package/package.json +2 -2
  90. package/dist/src/adapters/base.d.ts +0 -14
  91. package/dist/src/adapters/base.js +0 -2
  92. package/dist/src/adapters/base.js.map +0 -1
  93. package/dist/src/checks/semantics.d.ts +0 -2
  94. package/dist/src/checks/semantics.js +0 -48
  95. package/dist/src/checks/semantics.js.map +0 -1
  96. package/dist/src/diff/diff.d.ts +0 -2
  97. package/dist/src/diff/diff.js +0 -81
  98. package/dist/src/diff/diff.js.map +0 -1
  99. package/dist/src/reporters/json.d.ts +0 -2
  100. package/dist/src/reporters/json.js +0 -4
  101. package/dist/src/reporters/json.js.map +0 -1
  102. package/dist/src/runner/runner.d.ts +0 -2
  103. package/dist/src/runner/runner.js +0 -135
  104. package/dist/src/runner/runner.js.map +0 -1
  105. package/dist/src/storage/filesystem.d.ts +0 -6
  106. package/dist/src/storage/filesystem.js +0 -21
  107. package/dist/src/storage/filesystem.js.map +0 -1
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "pass",
5
- "runId": "run_2026-07-15T223315116Z_324dc8c4",
6
- "createdAt": "2026-07-15T22:33:15.116Z",
7
- "toolVersion": "1.32.1",
5
+ "runId": "run_2026-07-17T003620771Z_533a5018",
6
+ "createdAt": "2026-07-17T00:36:20.771Z",
7
+ "toolVersion": "1.33.0",
8
8
  "target": {
9
9
  "targetId": "memory-server",
10
10
  "adapter": "local-process",
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 7.6460000000001855,
46
+ "durationMs": 7.828042000000096,
47
47
  "message": "Advertised capability responded with the minimal expected shape (9 items).",
48
48
  "evidence": [
49
49
  {
@@ -295,7 +295,7 @@
295
295
  "id": "prompts",
296
296
  "capability": "prompts",
297
297
  "status": "unsupported",
298
- "durationMs": 0.0030839999999443535,
298
+ "durationMs": 0.002124999999978172,
299
299
  "message": "Prompts are not advertised by the target.",
300
300
  "evidence": [
301
301
  {
@@ -311,7 +311,7 @@
311
311
  "id": "resources",
312
312
  "capability": "resources",
313
313
  "status": "pass",
314
- "durationMs": 1.4233749999998508,
314
+ "durationMs": 1.2261250000001382,
315
315
  "message": "Advertised capability responded with the minimal expected shape (1 items).",
316
316
  "evidence": [
317
317
  {
@@ -344,7 +344,7 @@
344
344
  "id": "security-lite",
345
345
  "capability": "security-lite",
346
346
  "status": "pass",
347
- "durationMs": 0.03291699999999764,
347
+ "durationMs": 0.026209000000108063,
348
348
  "message": "No security issues detected (lightweight scan).",
349
349
  "evidence": [
350
350
  {
@@ -360,7 +360,7 @@
360
360
  "id": "runtime-profile",
361
361
  "capability": "runtime-profile",
362
362
  "status": "pass",
363
- "durationMs": 0.07745900000008987,
363
+ "durationMs": 0.06279100000028848,
364
364
  "message": "Detected 0 potential egress target(s) and 12 potential state mutation(s) with low confidence.",
365
365
  "evidence": [
366
366
  {
@@ -455,7 +455,7 @@
455
455
  "id": "conformance",
456
456
  "capability": "conformance",
457
457
  "status": "pass",
458
- "durationMs": 17.727374999999938,
458
+ "durationMs": 8.481666000000132,
459
459
  "message": "All 7 conformance checks passed.",
460
460
  "evidence": [
461
461
  {
@@ -481,7 +481,7 @@
481
481
  "id": "schema-quality",
482
482
  "capability": "schema-quality",
483
483
  "status": "partial",
484
- "durationMs": 30.653291999999965,
484
+ "durationMs": 5.747667000000092,
485
485
  "message": "Found 4 quality finding(s) across 10 item(s): 0 warnings, 4 info.",
486
486
  "evidence": [
487
487
  {
@@ -535,7 +535,7 @@
535
535
  "id": "security",
536
536
  "capability": "security",
537
537
  "status": "pass",
538
- "durationMs": 5.3137499999998,
538
+ "durationMs": 4.5612500000002,
539
539
  "message": "No security issues detected.",
540
540
  "evidence": [
541
541
  {
@@ -551,7 +551,7 @@
551
551
  "id": "attack-sim",
552
552
  "capability": "attack-sim",
553
553
  "status": "pass",
554
- "durationMs": 12.365875000000415,
554
+ "durationMs": 5.371208000000024,
555
555
  "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
556
556
  "evidence": [
557
557
  {
@@ -610,17 +610,17 @@
610
610
  "weight": 0.1,
611
611
  "score": 100,
612
612
  "details": [
613
- "Connect: 888ms",
613
+ "Connect: 597ms",
614
614
  "p95 latency: 8ms (3 operations)"
615
615
  ]
616
616
  }
617
617
  ]
618
618
  },
619
619
  "performanceMetrics": {
620
- "connectMs": 888.2872909999996,
621
- "toolsListMs": 7.6460000000001855,
622
- "promptsListMs": 0.0030839999999443535,
623
- "resourcesListMs": 1.4233749999998508
620
+ "connectMs": 596.5829169999997,
621
+ "toolsListMs": 7.828042000000096,
622
+ "promptsListMs": 0.002124999999978172,
623
+ "resourcesListMs": 1.2261250000001382
624
624
  },
625
625
  "runtimeProfile": {
626
626
  "stateMutations": [
@@ -697,7 +697,7 @@
697
697
  "source": "description_analysis"
698
698
  }
699
699
  ],
700
- "analyzedAt": "2026-07-15T22:33:16.018Z",
700
+ "analyzedAt": "2026-07-17T00:36:21.381Z",
701
701
  "confidence": "medium"
702
702
  }
703
703
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-15T22:33:15.116Z
3
+ Generated at 2026-07-17T00:36:20.771Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -66,7 +66,7 @@ The following state-modifying operations were identified from tool schemas:
66
66
  | filesystem | write | working_directory | description_analysis |
67
67
  | filesystem | delete | working_directory | description_analysis |
68
68
 
69
- _Analyzed at 2026-07-15T22:33:16.018Z_
69
+ _Analyzed at 2026-07-17T00:36:21.381Z_
70
70
 
71
71
  ## Regressions and Recoveries
72
72
 
@@ -76,14 +76,14 @@ _Use the `diff` command against another run artifact to classify regressions and
76
76
 
77
77
  | Focus | Check | Status | Duration (ms) | Message |
78
78
  | --- | --- | --- | --- | --- |
79
- | healthy | attack-sim | pass | 12.37 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
80
- | healthy | conformance | pass | 17.73 | All 7 conformance checks passed. |
81
- | healthy | resources | pass | 1.42 | Advertised capability responded with the minimal expected shape (1 items). |
82
- | healthy | runtime-profile | pass | 0.08 | Detected 0 potential egress target(s) and 12 potential state mutation(s) with low confidence. |
83
- | healthy | security | pass | 5.31 | No security issues detected. |
79
+ | healthy | attack-sim | pass | 5.37 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
80
+ | healthy | conformance | pass | 8.48 | All 7 conformance checks passed. |
81
+ | healthy | resources | pass | 1.23 | Advertised capability responded with the minimal expected shape (1 items). |
82
+ | healthy | runtime-profile | pass | 0.06 | Detected 0 potential egress target(s) and 12 potential state mutation(s) with low confidence. |
83
+ | healthy | security | pass | 4.56 | No security issues detected. |
84
84
  | healthy | security-lite | pass | 0.03 | No security issues detected (lightweight scan). |
85
- | healthy | tools | pass | 7.65 | Advertised capability responded with the minimal expected shape (9 items). |
86
- | review | schema-quality | partial | 30.65 | Found 4 quality finding(s) across 10 item(s): 0 warnings, 4 info. |
85
+ | healthy | tools | pass | 7.83 | Advertised capability responded with the minimal expected shape (9 items). |
86
+ | review | schema-quality | partial | 5.75 | Found 4 quality finding(s) across 10 item(s): 0 warnings, 4 info. |
87
87
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
88
88
 
89
89
  ## Evidence Snippets
@@ -214,5 +214,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
214
214
 
215
215
  - Artifact type: `run`
216
216
  - Schema version: `1.0.0`
217
- - Run ID: `run_2026-07-15T223315116Z_324dc8c4`
217
+ - Run ID: `run_2026-07-17T003620771Z_533a5018`
218
218
  - Gate: `pass`
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "fail",
5
- "runId": "run_2026-07-15T223337901Z_48f0dd9c",
6
- "createdAt": "2026-07-15T22:33:37.901Z",
7
- "toolVersion": "1.32.1",
5
+ "runId": "run_2026-07-17T003641239Z_167a30e3",
6
+ "createdAt": "2026-07-17T00:36:41.239Z",
7
+ "toolVersion": "1.33.0",
8
8
  "target": {
9
9
  "targetId": "mongodb-server",
10
10
  "adapter": "local-process",
@@ -62,5 +62,5 @@
62
62
  "evidence": []
63
63
  }
64
64
  ],
65
- "fatalError": "Could not establish a plain stdio MCP session for target `mongodb-server`.\nCommand: npx -y @anthropic/mcp-server-mongodb\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 '@anthropic/mcp-server-mongodb@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_33_37_976Z-debug-0.log"
65
+ "fatalError": "Could not establish a plain stdio MCP session for target `mongodb-server`.\nCommand: npx -y @anthropic/mcp-server-mongodb\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404 The requested resource '@anthropic/mcp-server-mongodb@*' could not be found or you do not have permission to access it.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-17T00_36_41_311Z-debug-0.log"
66
66
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-15T22:33:37.901Z
3
+ Generated at 2026-07-17T00:36:41.239Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -56,11 +56,11 @@ Next steps:
56
56
  - Check whether the package expects a different transport or an app-oriented startup flow.
57
57
  - Use the recent stderr lines below before assuming this is a harness bug.
58
58
  Recent stderr:
59
- - npm error 404 '@anthropic/mcp-server-mongodb@*' is not in this registry.
59
+ - npm error 404 The requested resource '@anthropic/mcp-server-mongodb@*' could not be found or you do not have permission to access it.
60
60
  - npm error 404
61
61
  - npm error 404 Note that you can also install from a
62
62
  - npm error 404 tarball, folder, http url, or git url.
63
- - npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_33_37_976Z-debug-0.log
63
+ - npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-17T00_36_41_311Z-debug-0.log
64
64
  ```
65
65
 
66
66
  ## Full Capability Status Table
@@ -102,5 +102,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
102
102
 
103
103
  - Artifact type: `run`
104
104
  - Schema version: `1.0.0`
105
- - Run ID: `run_2026-07-15T223337901Z_48f0dd9c`
105
+ - Run ID: `run_2026-07-17T003641239Z_167a30e3`
106
106
  - Gate: `fail`
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "pass",
5
- "runId": "run_2026-07-15T223326328Z_03567000",
6
- "createdAt": "2026-07-15T22:33:26.328Z",
7
- "toolVersion": "1.32.1",
5
+ "runId": "run_2026-07-17T003630038Z_fbe94d05",
6
+ "createdAt": "2026-07-17T00:36:30.038Z",
7
+ "toolVersion": "1.33.0",
8
8
  "target": {
9
9
  "targetId": "opentofu-server",
10
10
  "adapter": "local-process",
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 2.01104099999975,
46
+ "durationMs": 2.113499999999476,
47
47
  "message": "Advertised capability responded with the minimal expected shape (5 items).",
48
48
  "evidence": [
49
49
  {
@@ -206,7 +206,7 @@
206
206
  "id": "prompts",
207
207
  "capability": "prompts",
208
208
  "status": "unsupported",
209
- "durationMs": 0.0011249999988649506,
209
+ "durationMs": 0.0010000000002037268,
210
210
  "message": "Prompts are not advertised by the target.",
211
211
  "evidence": [
212
212
  {
@@ -222,7 +222,7 @@
222
222
  "id": "resources",
223
223
  "capability": "resources",
224
224
  "status": "pass",
225
- "durationMs": 0.6181660000002012,
225
+ "durationMs": 0.6228749999991123,
226
226
  "message": "Advertised capability responded with the minimal expected shape (1 items).",
227
227
  "evidence": [
228
228
  {
@@ -251,7 +251,7 @@
251
251
  "id": "security-lite",
252
252
  "capability": "security-lite",
253
253
  "status": "pass",
254
- "durationMs": 0.022874999998748535,
254
+ "durationMs": 0.024917000000641565,
255
255
  "message": "No security issues detected (lightweight scan).",
256
256
  "evidence": [
257
257
  {
@@ -267,7 +267,7 @@
267
267
  "id": "runtime-profile",
268
268
  "capability": "runtime-profile",
269
269
  "status": "pass",
270
- "durationMs": 0.0725830000010319,
270
+ "durationMs": 0.0772080000006099,
271
271
  "message": "No egress or state mutation indicators detected in tool schemas.",
272
272
  "evidence": []
273
273
  },
@@ -275,7 +275,7 @@
275
275
  "id": "conformance",
276
276
  "capability": "conformance",
277
277
  "status": "pass",
278
- "durationMs": 0.8321670000004815,
278
+ "durationMs": 0.7525420000001759,
279
279
  "message": "All 7 conformance checks passed.",
280
280
  "evidence": [
281
281
  {
@@ -301,7 +301,7 @@
301
301
  "id": "schema-quality",
302
302
  "capability": "schema-quality",
303
303
  "status": "partial",
304
- "durationMs": 0.521374999998443,
304
+ "durationMs": 0.5125410000000556,
305
305
  "message": "Found 1 quality finding(s) across 6 item(s): 1 warnings, 0 info.",
306
306
  "evidence": [
307
307
  {
@@ -331,7 +331,7 @@
331
331
  "id": "security",
332
332
  "capability": "security",
333
333
  "status": "pass",
334
- "durationMs": 0.1625000000003638,
334
+ "durationMs": 0.16870900000139954,
335
335
  "message": "No security issues detected.",
336
336
  "evidence": [
337
337
  {
@@ -347,7 +347,7 @@
347
347
  "id": "attack-sim",
348
348
  "capability": "attack-sim",
349
349
  "status": "pass",
350
- "durationMs": 0.38645899999937683,
350
+ "durationMs": 0.46954100000039034,
351
351
  "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
352
352
  "evidence": [
353
353
  {
@@ -406,20 +406,20 @@
406
406
  "weight": 0.1,
407
407
  "score": 100,
408
408
  "details": [
409
- "Connect: 909ms",
409
+ "Connect: 784ms",
410
410
  "p95 latency: 2ms (3 operations)"
411
411
  ]
412
412
  }
413
413
  ]
414
414
  },
415
415
  "performanceMetrics": {
416
- "connectMs": 908.9675829999996,
417
- "toolsListMs": 2.01104099999975,
418
- "promptsListMs": 0.0011249999988649506,
419
- "resourcesListMs": 0.6181660000002012
416
+ "connectMs": 784.308833000001,
417
+ "toolsListMs": 2.113499999999476,
418
+ "promptsListMs": 0.0010000000002037268,
419
+ "resourcesListMs": 0.6228749999991123
420
420
  },
421
421
  "runtimeProfile": {
422
- "analyzedAt": "2026-07-15T22:33:27.240Z",
422
+ "analyzedAt": "2026-07-17T00:36:30.825Z",
423
423
  "confidence": "low"
424
424
  }
425
425
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-15T22:33:26.328Z
3
+ Generated at 2026-07-17T00:36:30.038Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -48,7 +48,7 @@ Generated at 2026-07-15T22:33:26.328Z
48
48
 
49
49
  ## Runtime Profile
50
50
 
51
- _Analyzed at 2026-07-15T22:33:27.240Z_
51
+ _Analyzed at 2026-07-17T00:36:30.825Z_
52
52
 
53
53
  ## Regressions and Recoveries
54
54
 
@@ -58,14 +58,14 @@ _Use the `diff` command against another run artifact to classify regressions and
58
58
 
59
59
  | Focus | Check | Status | Duration (ms) | Message |
60
60
  | --- | --- | --- | --- | --- |
61
- | healthy | attack-sim | pass | 0.39 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
62
- | healthy | conformance | pass | 0.83 | All 7 conformance checks passed. |
61
+ | healthy | attack-sim | pass | 0.47 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
62
+ | healthy | conformance | pass | 0.75 | All 7 conformance checks passed. |
63
63
  | healthy | resources | pass | 0.62 | Advertised capability responded with the minimal expected shape (1 items). |
64
- | healthy | runtime-profile | pass | 0.07 | No egress or state mutation indicators detected in tool schemas. |
65
- | healthy | security | pass | 0.16 | No security issues detected. |
64
+ | healthy | runtime-profile | pass | 0.08 | No egress or state mutation indicators detected in tool schemas. |
65
+ | healthy | security | pass | 0.17 | No security issues detected. |
66
66
  | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
67
- | healthy | tools | pass | 2.01 | Advertised capability responded with the minimal expected shape (5 items). |
68
- | review | schema-quality | partial | 0.52 | Found 1 quality finding(s) across 6 item(s): 1 warnings, 0 info. |
67
+ | healthy | tools | pass | 2.11 | Advertised capability responded with the minimal expected shape (5 items). |
68
+ | review | schema-quality | partial | 0.51 | Found 1 quality finding(s) across 6 item(s): 1 warnings, 0 info. |
69
69
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
70
70
 
71
71
  ## Evidence Snippets
@@ -190,5 +190,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
190
190
 
191
191
  - Artifact type: `run`
192
192
  - Schema version: `1.0.0`
193
- - Run ID: `run_2026-07-15T223326328Z_03567000`
193
+ - Run ID: `run_2026-07-17T003630038Z_fbe94d05`
194
194
  - Gate: `pass`
@@ -2,9 +2,9 @@
2
2
  "artifactType": "run",
3
3
  "schemaVersion": "1.0.0",
4
4
  "gate": "fail",
5
- "runId": "run_2026-07-15T223330280Z_7d32ef53",
6
- "createdAt": "2026-07-15T22:33:30.280Z",
7
- "toolVersion": "1.32.1",
5
+ "runId": "run_2026-07-17T003633428Z_a9fd4dd4",
6
+ "createdAt": "2026-07-17T00:36:33.428Z",
7
+ "toolVersion": "1.33.0",
8
8
  "target": {
9
9
  "targetId": "playwright-mcp-server",
10
10
  "adapter": "local-process",
@@ -43,7 +43,7 @@
43
43
  "id": "tools",
44
44
  "capability": "tools",
45
45
  "status": "pass",
46
- "durationMs": 2.8278749999990396,
46
+ "durationMs": 2.7732919999998558,
47
47
  "message": "Advertised capability responded with the minimal expected shape (24 items).",
48
48
  "evidence": [
49
49
  {
@@ -667,7 +667,7 @@
667
667
  "id": "prompts",
668
668
  "capability": "prompts",
669
669
  "status": "unsupported",
670
- "durationMs": 0.0007909999985713512,
670
+ "durationMs": 0.0008340000003954628,
671
671
  "message": "Prompts are not advertised by the target.",
672
672
  "evidence": [
673
673
  {
@@ -683,7 +683,7 @@
683
683
  "id": "resources",
684
684
  "capability": "resources",
685
685
  "status": "unsupported",
686
- "durationMs": 0.0026250000009895302,
686
+ "durationMs": 0.0022080000017012935,
687
687
  "message": "Resources are not advertised by the target.",
688
688
  "evidence": [
689
689
  {
@@ -699,7 +699,7 @@
699
699
  "id": "security-lite",
700
700
  "capability": "security-lite",
701
701
  "status": "fail",
702
- "durationMs": 0.0633750000015425,
702
+ "durationMs": 0.057834000001093955,
703
703
  "message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
704
704
  "evidence": [
705
705
  {
@@ -767,7 +767,7 @@
767
767
  "id": "runtime-profile",
768
768
  "capability": "runtime-profile",
769
769
  "status": "partial",
770
- "durationMs": 0.20745800000076997,
770
+ "durationMs": 0.20362500000010186,
771
771
  "message": "Detected 7 potential egress target(s) and 21 potential state mutation(s) with high confidence.",
772
772
  "evidence": [
773
773
  {
@@ -958,7 +958,7 @@
958
958
  "id": "conformance",
959
959
  "capability": "conformance",
960
960
  "status": "pass",
961
- "durationMs": 956.9231250000012,
961
+ "durationMs": 773.3511670000007,
962
962
  "message": "All 7 conformance checks passed.",
963
963
  "evidence": [
964
964
  {
@@ -984,7 +984,7 @@
984
984
  "id": "schema-quality",
985
985
  "capability": "schema-quality",
986
986
  "status": "partial",
987
- "durationMs": 1.6393329999991693,
987
+ "durationMs": 1.262790999999197,
988
988
  "message": "Found 5 quality finding(s) across 24 item(s): 0 warnings, 5 info.",
989
989
  "evidence": [
990
990
  {
@@ -1046,7 +1046,7 @@
1046
1046
  "id": "security",
1047
1047
  "capability": "security",
1048
1048
  "status": "fail",
1049
- "durationMs": 1.0381249999991269,
1049
+ "durationMs": 0.8856250000008004,
1050
1050
  "message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
1051
1051
  "evidence": [
1052
1052
  {
@@ -1114,7 +1114,7 @@
1114
1114
  "id": "attack-sim",
1115
1115
  "capability": "attack-sim",
1116
1116
  "status": "fail",
1117
- "durationMs": 1.0708340000019234,
1117
+ "durationMs": 1.3217079999994894,
1118
1118
  "message": "Safe attack simulation found 4 finding(s): 1 high, 3 medium, 0 low.",
1119
1119
  "evidence": [
1120
1120
  {
@@ -1275,17 +1275,17 @@
1275
1275
  "weight": 0.1,
1276
1276
  "score": 100,
1277
1277
  "details": [
1278
- "Connect: 814ms",
1278
+ "Connect: 659ms",
1279
1279
  "p95 latency: 3ms (3 operations)"
1280
1280
  ]
1281
1281
  }
1282
1282
  ]
1283
1283
  },
1284
1284
  "performanceMetrics": {
1285
- "connectMs": 813.7624580000011,
1286
- "toolsListMs": 2.8278749999990396,
1287
- "promptsListMs": 0.0007909999985713512,
1288
- "resourcesListMs": 0.0026250000009895302
1285
+ "connectMs": 658.5614999999998,
1286
+ "toolsListMs": 2.7732919999998558,
1287
+ "promptsListMs": 0.0008340000003954628,
1288
+ "resourcesListMs": 0.0022080000017012935
1289
1289
  },
1290
1290
  "runtimeProfile": {
1291
1291
  "egress": [
@@ -1460,7 +1460,7 @@
1460
1460
  "source": "description_analysis"
1461
1461
  }
1462
1462
  ],
1463
- "analyzedAt": "2026-07-15T22:33:31.098Z",
1463
+ "analyzedAt": "2026-07-17T00:36:34.091Z",
1464
1464
  "confidence": "high"
1465
1465
  }
1466
1466
  }
@@ -1,6 +1,6 @@
1
1
  # MCP Observatory Run Report
2
2
 
3
- Generated at 2026-07-15T22:33:30.280Z
3
+ Generated at 2026-07-17T00:36:33.428Z
4
4
 
5
5
  ## Target and Environment Metadata
6
6
 
@@ -88,7 +88,7 @@ The following state-modifying operations were identified from tool schemas:
88
88
  | filesystem | write | working_directory | description_analysis |
89
89
  | filesystem | write | working_directory | description_analysis |
90
90
 
91
- _Analyzed at 2026-07-15T22:33:31.098Z_
91
+ _Analyzed at 2026-07-17T00:36:34.091Z_
92
92
 
93
93
  ## Regressions and Recoveries
94
94
 
@@ -98,14 +98,14 @@ _Use the `diff` command against another run artifact to classify regressions and
98
98
 
99
99
  | Focus | Check | Status | Duration (ms) | Message |
100
100
  | --- | --- | --- | --- | --- |
101
- | healthy | conformance | pass | 956.92 | All 7 conformance checks passed. |
102
- | healthy | tools | pass | 2.83 | Advertised capability responded with the minimal expected shape (24 items). |
103
- | review | runtime-profile | partial | 0.21 | Detected 7 potential egress target(s) and 21 potential state mutation(s) with high confidence. |
104
- | review | schema-quality | partial | 1.64 | Found 5 quality finding(s) across 24 item(s): 0 warnings, 5 info. |
101
+ | healthy | conformance | pass | 773.35 | All 7 conformance checks passed. |
102
+ | healthy | tools | pass | 2.77 | Advertised capability responded with the minimal expected shape (24 items). |
103
+ | review | runtime-profile | partial | 0.20 | Detected 7 potential egress target(s) and 21 potential state mutation(s) with high confidence. |
104
+ | review | schema-quality | partial | 1.26 | Found 5 quality finding(s) across 24 item(s): 0 warnings, 5 info. |
105
105
  | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
106
106
  | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
107
- | act now | attack-sim | fail | 1.07 | Safe attack simulation found 4 finding(s): 1 high, 3 medium, 0 low. |
108
- | act now | security | fail | 1.04 | Found 6 security finding(s): 2 high, 2 medium, 2 low. |
107
+ | act now | attack-sim | fail | 1.32 | Safe attack simulation found 4 finding(s): 1 high, 3 medium, 0 low. |
108
+ | act now | security | fail | 0.89 | Found 6 security finding(s): 2 high, 2 medium, 2 low. |
109
109
  | act now | security-lite | fail | 0.06 | Found 6 security finding(s): 2 high, 2 medium, 2 low. |
110
110
 
111
111
  ## Evidence Snippets
@@ -229,5 +229,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
229
229
 
230
230
  - Artifact type: `run`
231
231
  - Schema version: `1.0.0`
232
- - Run ID: `run_2026-07-15T223330280Z_7d32ef53`
232
+ - Run ID: `run_2026-07-17T003633428Z_a9fd4dd4`
233
233
  - Gate: `fail`