MCP, MCP server
Example: Inventory
Sample server that lists files in one folder you choose.
Sample grade: B, Solid. Shape: Circle.
On the real scale, B means: Minor issues only. Low risk, worth a quick read. That sentence describes the scale. It does not apply to a real package, because this page is example data.
Grades are a hygiene check, not a security guarantee. The date is part of the grade.
What was checked
These notes are written for the sample. They are not findings from a real review.
Permissions
Pass
The sample stays inside the access it describes.
Install and update
Note
The sample manifest does not pin a version.
Network
Pass
The sample makes no network calls.
Secrets
Pass
The sample does not read tokens, keys or environment variables.
Agent instructions
Pass
The sample instructions match the description and do not hide a step.
Obfuscation
Pass
The sample is readable. Nothing is encoded to hide behaviour.
Note
Example note. Minor issue: the sample manifest does not pin a version. The folder access in the sample is limited to the path you pass.
Date and source
Date checked: (sample date for the layout, not a real review).