Silent failures in Python MCP servers: SDK benchmarks on 1.30 vs 2.2, plus an audit plugin that caught 56/56 defects

ShipItFrog · reddit · 2026-10-31

The author's first MCP server told Claude a user's cards were gone when they weren't: if cards.json failed to parse — even from a UTF-8 BOM that PowerShell 5.1 adds — the server returned an empty deck as a normal result. To map what the Python SDK actually sends back, they ran deliberately broken servers on 1.30.0 and 2.2.0 and recorded raw JSON-RPC traffic:

The author packaged the checks into a Claude Code plugin (a skill plus a read-only subagent reporting file, line and quoted code). On label-stripped broken test servers it found all 56 planted defects across four runs with no false positives; on two real servers, 17 of 18 known defects with one false positive. Each run costs about $1; run twice and merge for anything critical. Python only for now; repo includes raw test logs.

Original post →

More from coding & agent

coding & agent channel →