[mcp-inspector] MCP Inspector Report - 2026-10-05

[github-actions[bot]]

🔍 MCP Inspector Report - 2026-10-05

Summary

• Files Inspected: 26 in .github/workflows/shared/mcp/
• Active MCP Servers: 19 — By Type: HTTP: 8, Container: 5, Local (npx/uvx): 6
• Disabled: 4 (brave, markitdown, notion, semgrep — container definitions removed pending patched upstream images)
• Non-server helpers: 3 (sentrux CLI, slack safe-job, serena-go wrapper)

Inventory Table

Server	Type	Tools	Secrets	Status
agentdb	local (npx)	*	N	✅
ast-grep	local (npx)	*	N	✅
azure-devops	http	*	Y (ADO_MCP_AUTH_TOKEN)	⚠️
azure	container	6 (read-only)	Y (tenant/client id/secret)	✅
datadog	http	6	Y (DD_API_KEY, DD_APPLICATION_KEY/DD_APP_KEY, DD_SITE)	✅
deepwiki	http	3	N	✅
fabric-rti	local (uvx)	13+	Y (Azure creds)	⚠️
grafana	container (pinned 1.1.0)	7	Y (GRAFANA_URL, token)	✅
graft	local (npx, pinned 0.8.0)	6	N	✅
jupyter	http (+ service containers)	5	N (token = run_id)	⚠️
kreuzberg	container	~10	N	⚠️
mempalace	http (host.docker.internal)	19	N	⚠️
microsoft-docs	http	*	N	✅
ruflo	local (npx)	8	N	✅
sentry	local (npx)	16	Y (SENTRY_ACCESS_TOKEN, optional OPENAI key)	✅
serena	container (pinned 1.7.0)	*	N	✅
skillz	container	*	Y (github.token)	⚠️
svelte	http	5	N	✅
tavily	http	*	Y (TAVILY_API_KEY)	⚠️
brave / markitdown / notion / semgrep	disabled	–	–	❌

Details (notable)

• azure-devops: requires organization import-input; network allowlist for *.dev.azure.com etc. Wildcard tool allow-list.
• jupyter: services use :latest images; token is github.run_id (predictable); ports 8888/3000 published.
• mempalace: HTTP via host.docker.internal:8765; allow-list includes write tools (add_drawer, delete_drawer, kg_add, kg_invalidate, diary_write).
• kreuzberg: container image has no tag/digest pin; mounts workspace read-only.
• skillz: container has no pinned tag; mounts .github/skills read-only and receives github.token.
• tavily: wildcard intentionally retained (security decision 2026-05-19).
• fabric-rti: uvx package unpinned.
• agentdb / ast-grep / ruflo / sentry: npx packages — verify version pinning (graft is pinned at 0.8.0).
• disabled (brave, markitdown, notion, semgrep): files contain only comments/docs; restore mcp-servers block and update digest in actions-lock.json once patched images exist.

Recommendations

1. Pin unpinned images/packages: jupyter (:latest), kreuzberg, skillz, fabric-rti, npx-based servers.
2. Replace the predictable JUPYTER_TOKEN: run_id with a generated secret.
3. Replace wildcard allowed: ["*"] (azure-devops, agentdb, ast-grep, microsoft-docs, tavily, serena/skillz) with explicit tool lists where feasible.
4. Review mempalace write-tool exposure for read-only workflows.
5. Track re-enabling of the 4 disabled servers or remove stale files/docs.

Generated by 🔍 MCP Inspector Agent · copilot · auto · 14.7 AIC · ⌖ 10 AIC · ⊞ 9K · ◷

• expires on Oct 6, 2026, 10:57 AM UTC-08:00

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-10-06T18:57:22.968Z.

Closed by Workflow