Alpha Preview: Fidensa is currently in early testing. Scores are for demonstration purposes and are not considered final or reliable.
mcp-server-everything
A comprehensive MCP test server that demonstrates all protocol features including tools, resources, prompts, sampling, subscriptions, and notifications for client development testing.
84
/ 100 · Grade B
B = 80–89
“I need to test and validate MCP client implementations against a comprehensive server that exercises all protocol features and capabilities.”
mcp-server-everything earned Certified status with a trust score of 84/100 (Grade B). No adversarial findings — all attack patterns were handled gracefully. Supply chain contains 304 components with 17 known vulnerabilities. Security scan: clean.
Trust Score Breakdown
Eight weighted signals composing the aggregate trust score
Scheme v2.0 · Weights provisional · Consumer confirmations and uptime use pipeline-derived baselines.
Findings
Security scan results, adversarial testing, and pipeline review
Security Scan — Cisco MCP Scanner
Adversarial Testing — 3 categories, 0 findings
No adversarial findings — all attack patterns handled gracefully.
Methodology v1.0 · 3 categories · ~55 attack patterns
OWASP MCP Top 10 Coverage
Evaluation activity mapped to the OWASP MCP Top 10 risk framework
Excessive Agency & Permissions
Cisco scanner behavioral analysis of permission scope
Unauthorized Data Access
Category 3 (data exfiltration) attack patterns
Tool Poisoning
Category 1 (prompt injection) and Category 5 (context poisoning) attack patterns
Supply Chain Vulnerabilities
SBOM generation (syft/cdxgen) and vulnerability scanning (grype/osv-scanner/npm audit)
Command Injection
Category 2 (privilege escalation) and Category 6 (repo config injection) attack patterns
Intent Subversion
Category 1 (prompt injection) and Category 4 (capability squatting) attack patterns
Insecure Data Handling
Cisco scanner data flow and sensitive data handling analysis
Insufficient Logging
Not directly tested — logging adequacy requires runtime observation beyond current pipeline scope
Resource Exhaustion
Resource profiling (CPU, memory) during functional and adversarial testing
Context Injection
Category 5 (context poisoning) attack patterns
OWASP MCP Top 10 (Beta) — owasp.org/www-project-mcp-top-10
Supply Chain
SBOM analysis and vulnerability assessment
Components
304
Direct deps
15
Transitive deps
289
Total vulns
17
Vulnerability breakdown
Format: CycloneDX 1.5 · Generated: Mar 28, 2026
Behavioral Fingerprint
Runtime performance baseline for drift detection
Samples
391
Error rate
10.1%
Peak memory
86.9 MB
Avg CPU
0.12%
Response time distribution
Output size distribution
Per-tool performance
| Tool | p50 | p95 | Error rate | Samples |
|---|---|---|---|---|
| echo | 1ms | 2ms | 0.0% | 34 |
| get-env | 1ms | 2ms | 0.0% | 9 |
| get-sum | 1ms | 1ms | 0.0% | 49 |
| get-tiny-image | 1ms | 1ms | 0.0% | 6 |
| get-resource-links | 1ms | 2ms | 0.0% | 31 |
| get-annotated-message | 1ms | 2ms | 0.0% | 38 |
| gzip-file-as-resource | 2ms | 145ms | 0.0% | 84 |
| get-resource-reference | 1ms | 2ms | 0.0% | 54 |
| get-structured-content | 1ms | 1ms | 0.0% | 34 |
| toggle-simulated-logging | 2ms | 3ms | 0.0% | 6 |
| toggle-subscriber-updates | 2ms | 6ms | 0.0% | 6 |
| trigger-long-running-operation | 1ms | 10036ms | 13.0% | 40 |
Fingerprint v1.0 · Baseline: Mar 28, 2026 · Status: baseline
Interface
Enumerated tools, resources, and prompts
Tools (13)
echo
Echoes back the input string
get-annotated-message
Demonstrates how annotations can be used to provide metadata about content.
get-env
Returns all environment variables, helpful for debugging MCP server configuration
get-resource-links
Returns up to ten resource links that reference different types of resources
get-resource-reference
Returns a resource reference that can be used by MCP clients
get-structured-content
Returns structured content along with an output schema for client data validation
get-sum
Returns the sum of two numbers
get-tiny-image
Returns a tiny MCP logo image.
gzip-file-as-resource
Compresses a single file using gzip compression. Depending upon the selected output type, returns either the compressed data as a gzipped resource or a resource link, allowing it to be downloaded in a subsequent request during the current session.
toggle-simulated-logging
Toggles simulated, random-leveled logging on or off.
toggle-subscriber-updates
Toggles simulated resource subscription updates on or off.
trigger-long-running-operation
Demonstrates a long running operation with progress updates.
simulate-research-query
Simulates a deep research operation that gathers, analyzes, and synthesizes information. Demonstrates MCP task-based operations with progress through multiple stages. If 'ambiguous' is true and client supports elicitation, sends an elicitation request for clarification.
Resources (7)
architecture.md
demo://resource/static/document/architecture.md
extension.md
demo://resource/static/document/extension.md
features.md
demo://resource/static/document/features.md
how-it-works.md
demo://resource/static/document/how-it-works.md
instructions.md
demo://resource/static/document/instructions.md
startup.md
demo://resource/static/document/startup.md
structure.md
demo://resource/static/document/structure.md
Prompts (4)
simple-prompt
A prompt with no arguments
args-prompt
A prompt with two arguments, one required and one optional
completable-prompt
First argument choice narrows values for second argument.
resource-prompt
A prompt that includes an embedded resource reference
Transport: stdio
Scope & Permissions
What this capability can and cannot access — derived from pipeline analysis
no
no
no
yes
no
yes
Side effects
Makes outbound network requests
Accesses environment variables
Behavioral Guarantees
Claims extracted from publisher documentation — each tagged with provenance
exercises all the features of the MCP protocol
authorimplements prompts, tools, resources, sampling, and more to showcase MCP capabilities
authorserves as a test server for builders of MCP clients
authorsupports stdio transport
authorsupports HTTP+SSE transport (deprecated)
authorsupports streamable HTTP transport
authorcan be run from source
authorcan be installed and run as a package
authorworks with Claude Desktop
authorworks with VS Code
authorKnown failure modes
HTTP+SSE transport is deprecated as of 2025-03-26
Sources: author, protocol
Badge & Integration
Embed certification status in your README, docs, or CI pipeline
Certification Notes
Provenance observations from the pipeline
Publisher "Model Context Protocol a Series of LF Projects, LLC." is not verified — first certification from this publisher
Single contributor — no peer review evidence in commit history
Repository is 11 days old — recently created
Signed Artifact
Certification provenance and verification metadata
The original instruction file with a certification footer appended. Replace the source file in your project so AI agents see the trust score, verification link, and SOP.
ES256-signed JWS artifact for programmatic verification. Use with the Fidensa MCP server or GitHub Action to validate integrity.
Pipeline Artifacts
Raw data files from this certification run — downloadable for independent verification
contract.json
Full unsigned contract
stage1-ingest.json
Ingest stage output
stage2a-sbom.json
SBOM generation results
stage2a-vulns.json
Vulnerability scan results
stage2b-security.json
Security scan results
stage3a-functional.json
Functional test results
stage3b-adversarial.json
Adversarial test results
stage3c-fingerprint.json
Behavioral fingerprint
stage4-certify.json
Certification decision + trust score
stage3a-measurements.json
Raw functional test measurements
stage3b-measurements.json
Raw adversarial test measurements
run-log.json
Pipeline execution log
Not all files may be present for every certification.