Over the weekend Claude and I built mcp-certify.
Been using MCP since Anthropic dropped the protocol and as its gotten more popular, security has been a major problem for people wanting to run/connect to MCP servers, so I built this CLI that automatically can test any MCP server for:
- protocol compliance - security - logic correctness - performance - supply chain
It returns a single score and detailed findings for the server. Currently works best with local/self-hosted servers (stdio or HTTP). Working on better support for OAuth and cloud-hosted servers next.
Repository: https://github.com/jackgladowsky/mcp-certify Install: npm install -g mcp-certify
Would love some feedback, bug reports, or anything!