mcp-doctor adds CI-friendly health and security audits for MCP servers
sticky_block · reddit · 2026-07-22
A developer built mcp-doctor, a zero-dependency Python CLI that launches an MCP server, runs the initialize handshake, introspects its surface, and returns a real exit code for CI use. It checks three areas: health (startup and handshake), quality (tool bloat, weak descriptions, bad schemas), and security (prompt-injection wording in descriptions, suspicious shell/eval behavior, leaked secrets). The author says the checks are conservative and asks for feedback on useful signals versus noise.
More from coding & agent
- Filtering secrets on the write path: why agent memory deserves more suspicion at ingest than retrieval — Classic-Being-7960 · 2026-10-26
- INT21's AI agent swarm rewrote Drama 3's inference runtime in Rust within one hour, beating SGLang-Omni — bingxu_ · 2026-10-26
- After OpenCode key leak: 5 practical rules for keeping keys away from agents — jacobholm_dev · 2026-10-26
- wandb 0.31.0 ships with 2x faster startup, adds JSON output for coding agents — wandb · 2026-10-26
- $150 modular Linux handheld Mecha Comet opens preorders — pocket SSH and Claude Code included — Paimaamu · 2026-10-26
- Running 20 single-job Grok bots to manage calls, roadmaps, and weekly updates — inkko44 · 2026-10-26