Repository navigation
mcpprobe 0.3.0: 24 passive checks (from 16), report schema 0.3. New: META-06 tool-annotation lint (readOnlyHint/destructiveHint/openWorldHint missing or contradicting the tool's capability), META-07 toxic-flow warning (private data + untrusted content + external send on one server), six 2026-07-28 protocol checks (TRANS-06..09 server/discover, downgrade acceptance, Mcp-Method mismatch, ttlMs/cacheScope; AUTH-05 RFC 9207 iss, AUTH-06 deprecated DCR), directory readiness (Anthropic, OpenAI, HubSpot) in the JSON report, Retry-After handling with a scan-wide budget and "blocked" (never a false pass), optional Hugging Face judge for META-01 (off by default, extra [hf]), META-01 held-out benchmark in docs/benchmark.md. GitHub Action: result output, annotations and job summary, exit code 3 documented, safe SARIF upload; docs/github-action.md. Known-bad, known-good and trifecta fixtures pin every outcome in CI.