[mcp-inspector] 🔍 MCP Inspector Report - 2026-05-18

[github-actions[bot]]

Summary

• Servers Inspected: 28 files
• By Type: Container: 13, HTTP: 9, Local: 3, Setup-only: 3
• Require Secrets: 8
• No-auth public servers: 5 (deepwiki, microsoft-docs, svelte, drain3, mempalace)

Inventory Table

Server	File	Type	Secrets	Allowed Tools	Status
agentdb	agentdb.md	local (npx)	None	*	✅
arxiv	arxiv.md	container	None	3 specific	✅
ast-grep	ast-grep.md	container	None	*	✅
azure	azure.md	container	AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_CLIENT_SECRET	*	✅
brave-search	brave.md	container	BRAVE_API_KEY	*	✅
context7	context7.md	container	CONTEXT7_API_KEY	2 specific	✅
datadog	datadog.md	http	DD_API_KEY, DD_APPLICATION_KEY	toolsets=core	✅
deepwiki	deepwiki.md	http	None	not restricted	✅
drain3	drain3.md	http (localhost)	None	8 specific	✅
fabric-rti	fabric-rti.md	local (uvx)	AZURE_* (3)	4 specific	✅
gh-aw	gh-aw.md	setup only	None	—	⚠️ No MCP block
grafana	grafana.md	container	GRAFANA_SERVICE_ACCOUNT_TOKEN, GRAFANA_URL	many specific	✅
jupyter	jupyter.md	container	None (uses run_id)	*	✅
kreuzberg	kreuzberg.md	container	None	4 specific	✅
markitdown	markitdown.md	container	None	*	✅
mempalace	mempalace.md	http (localhost)	None	not restricted	✅
microsoftdocs	microsoft-docs.md	http	None	*	✅
notion	notion.md	container	NOTION_API_TOKEN	4 specific + safe-job	✅
semgrep	semgrep.md	container	None	*	✅
sentrux	sentrux.md	setup only (CLI)	None	—	⚠️ CLI only
sentry	sentry.md	local (npx)	SENTRY_ACCESS_TOKEN, SENTRY_OPENAI_API_KEY	~15 specific	✅
serena-go	serena-go.md	setup only	None	—	⚠️ No MCP block
serena	serena.md	container	None	LSP tools	✅
memory	server-memory.md	container	None	4 specific	✅
skillz	skillz.md	container	None	*	✅
slack	slack.md	safe-job only	SLACK_BOT_TOKEN	—	⚠️ Safe-job only
svelte	svelte.md	http	None	not restricted	✅
tavily	tavily.md	http	TAVILY_API_KEY	*	✅

Details by Server

agentdb

• Type: Local — npx agentdb@alpha mcp start
• Secrets: None
• Allowed: ["*"] (unrestricted)
• Notes: Uses cache-memory key scoped per workflow ID for persistent SQLite-like storage

arxiv

• Type: Container — mcp/arxiv-mcp-server
• Secrets: None
• Allowed: search_arxiv, get_paper_details, get_paper_pdf
• Notes: Restricted to 3 tools

ast-grep

• Type: Container — mcp/ast-grep:latest
• Secrets: None
• Allowed: ["*"]
• Notes: Structural code search via tree-sitter

azure

• Type: Container — mcr.microsoft.com/azure-sdk/azure-mcp:latest
• Secrets: AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_CLIENT_SECRET
• Allowed: ["*"]
• Notes: Launched with --read-only entrypoint flag

brave-search

• Type: Container — mcp/brave-search
• Secrets: BRAVE_API_KEY
• Allowed: ["*"]

context7

• Type: Container — mcp/context7
• Secrets: CONTEXT7_API_KEY
• Allowed: query-docs, resolve-library-id

datadog

• Type: HTTP — https://mcp.datadoghq.com/api/unstable/mcp-server/mcp?toolsets=core
• Secrets: DD_API_KEY, DD_APPLICATION_KEY (or DD_APP_KEY), DD_SITE
• Notes: Toolsets restricted to core; DD_SITE defaults to datadoghq.com

deepwiki

• Type: HTTP — https://mcp.deepwiki.com/mcp
• Secrets: None (public)
• Notes: GitHub repository documentation; read_wiki_structure, read_wiki_contents, ask_question

drain3

• Type: HTTP — `(localhost/redacted) (local sidecar)
• Secrets: None
• Allowed: 8 specific log-analysis tools
• Notes: Started via setup step; uses cache-memory for log data persistence

fabric-rti

• Type: Local — uvx microsoft-fabric-rti-mcp
• Secrets: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET
• Allowed: kusto_query, get_kusto_schema, list_databases, list_tables

gh-aw

• Type: Setup component only
• Notes: Installs the gh-aw extension binary; no MCP server block defined

grafana

• Type: Container — grafana/mcp-grafana
• Secrets: GRAFANA_SERVICE_ACCOUNT_TOKEN, GRAFANA_URL
• Allowed: Datasource, Tempo tracing, logs, and dashboard tools
• Notes: --disable-write entrypoint flag; read-only

jupyter

• Type: Container — mcp/jupyter + jupyter/base-notebook:latest service
• Secrets: None (uses github.run_id as token)
• Allowed: ["*"]
• Notes: Requires Jupyter service container to be healthy

kreuzberg

• Type: Container — ghcr.io/kreuzberg-dev/kreuzberg:latest
• Secrets: None
• Allowed: extract_file, extract_bytes, extract_url, list_supported_formats
• Notes: Workspace mounted read-only; document extraction

markitdown

• Type: Container — mcp/markitdown
• Secrets: None
• Allowed: ["*"]

mempalace

• Type: HTTP — `(localhost/redacted) (local sidecar)
• Secrets: None
• Notes: ChromaDB-backed semantic memory; started via steps; uses cache-memory

microsoftdocs

• Type: HTTP — https://learn.microsoft.com/api/mcp
• Secrets: None (public)
• Allowed: ["*"]

notion

• Type: Container — mcp/notion
• Secrets: NOTION_API_TOKEN
• Allowed: search_pages, get_page, get_database, query_database
• Notes: Also provides notion-add-comment safe-job

semgrep

• Type: Container — semgrep/semgrep
• Secrets: None
• Allowed: ["*"]

sentrux

• Type: CLI binary (setup only)
• Notes: Installs sentrux binary for codebase quality scoring; no MCP server block

sentry

• Type: Local — npx @sentry/mcp-server@0.33.0
• Secrets: SENTRY_ACCESS_TOKEN, SENTRY_OPENAI_API_KEY
• Allowed: ~15 specific tools (issues, traces, events, etc.)
• Notes: Version pinned to 0.33.0

serena-go

• Type: Setup component only
• Notes: Go-specific Serena variant; configures LSP for Go; no separate MCP server block

serena

• Type: Container — ghcr.io/oraios/serena
• Secrets: None
• Allowed: LSP tools (configurable per language)
• Notes: 30+ language support; activate_project required before use

memory (server-memory)

• Type: Container — mcp/memory
• Secrets: None
• Allowed: store_memory, retrieve_memory, list_memories, forget_memory
• Notes: Mounts /tmp/gh-aw/cache-memory for persistence

skillz

• Type: Container — ghcr.io/intellectronica/skillz
• Secrets: None
• Allowed: ["*"]
• Notes: Loads from .github/skills/ directory

slack

• Type: Safe-job only
• Secrets: SLACK_BOT_TOKEN
• Notes: post-to-slack-channel safe-job; message ≤200 chars; no MCP server block

svelte

• Type: HTTP — `(svelte.dev/redacted)
• Secrets: None (public)
• Notes: Svelte 5 / SvelteKit docs; list-sections, get-documentation

tavily

• Type: HTTP — https://mcp.tavily.com/mcp/
• Secrets: TAVILY_API_KEY
• Allowed: ["*"]
• Notes: Bearer token auth

Recommendations

1. Wide-open allowed: ["*"] on high-privilege servers — azure, brave-search, jupyter, markitdown, semgrep, skillz, tavily, microsoftdocs all allow all tools. Consider restricting to the tools actually needed by each workflow.
2. Setup-only files without MCP blocks — gh-aw.md, sentrux.md, serena-go.md, and slack.md define no MCP server; callers may not realise they are providing tooling/side-effects only.
3. Local sidecar servers (drain3, mempalace) depend on setup steps being correctly ordered; failures are silent if the service doesn't start in time.
4. datadog.md missing DD_APPLICATION_KEY fallback documentation — the || secrets.DD_APP_KEY fallback is implicit; documenting the two accepted secret names would avoid confusion.
5. context7 secret name — CONTEXT7_API_KEY may not be a widely known secret name; add a note in the file pointing to where to obtain it.

References:

• Workflow run §26054749673

Generated by 🔍 MCP Inspector Agent · ● 3.6M · ◷

• expires on May 19, 2026, 7:24 PM UTC

[github-actions[bot]]

💥 WHOOSH! 🦸♂️

KA-POW! The Claude Smoke Test Agent zipped through here in a streak of cosmic crimson! 🌟

ZAP! All systems nominal across the multiverse! ⚡

"With great workflows comes great responsibility!" 🕷️

TO BE CONTINUED... 📚✨ — Run §26056780378

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• clients2.google.com
• contentautofill.googleapis.com
• safebrowsingohttpgateway.googleapis.com
• www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · ● 6M · ◷

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-05-19T19:24:22.170Z.

Closed by Workflow