mcpward

TsvetanG2/mcpward
★ 0 stars TypeScript AI/LLM Updated today
Black-box security & contract testing for MCP servers. Catch rug-pulls, tool poisoning, schema drift & protocol violations in CI — with JUnit & SARIF reports.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcpward": {
      "command": "npx",
      "args": [
        "-y",
        "TsvetanG2/mcpward"
      ]
    }
  }
}

README Excerpt

Treat an MCP server like any other external dependency: snapshot its contract, then fail the build when it changes underneath you. Black-box, so it works against servers you didn't write. **Runs entirely on your machine — no account, no API calls, no telemetry.** Catches schema drift, silently changed tool descriptions, protocol violations, error-contract mistakes, and tool-poisoning patterns. Reports to console, JSON, JUnit, or SARIF.

Tools (11)

annotation_changedbreaking_schema_changedescription_changedgoldenjsonpathnonbreaking_schema_changeoutput_matches_schemaprotocol_error_codetool_addedtool_is_errortool_removed

Topics

ai-agentsciclicontract-testingdeveloper-toolsdevsecopsjson-rpcllmmcpmcp-servermcp-toolsmodel-context-protocolregression-testingsarifschema-validation