Skip to content

mcp-vet v0.2.0

Choose a tag to compare

@Booyaka101 Booyaka101 released this 22 Jul 11:50

Zero-config CLI that scans MCP server source (TypeScript, JavaScript, Python) for the 7 patterns broken or deprecated by the 2026-07-28 Model Context Protocol spec — sessions / Mcp-Session-Id, the initialize handshake, the -32002 error code, legacy Tasks methods, and the roots / sampling / logging capabilities.

npx mcp-vet .

Highlights: confidence scoring (--min-confidence), SARIF 2.1.0 output for GitHub code scanning, inline suppression, config file, and CI-ready exit codes. Local-only — no account, API key, or network calls.

Validated against the official MCP TypeScript SDK's own example servers: 4 true findings, 0 false positives.

See CHANGELOG.md for the full list.