PLAYGROUND / 01
A closer look at
your MCP tools.
Inspect tool descriptions and server configuration before connecting an agent.
What is your agent connecting to?
Input stays in this page until you clear it or leave. Reports can include snippets from your input; review them before sharing.
02 / REPORT
READYStart with your configuration.
Paste JSON or choose a sample, then run the check. Findings include evidence and a suggested action.
31 deterministic checks. Scores summarize matched signals, not exploit probability. No match does not establish safety. This check does not execute server code or verify authorization.
Read the MCP security starting points ↗REFERENCE / 01
Server directory
Documented permission surfaces, not security endorsements. Review dates describe source checks, not installation audits.
| Server | Permission surface | Transport | Provenance |
|---|
REFERENCE / 02
Spec changes
| Change | 2025-06-18 baseline | Later revisions | Implementation action |
|---|
REFERENCE / 03
Case files
Public advisories and research demonstrations. A demonstration is not evidence of a production breach.