mcp-server-everything
A comprehensive MCP test server that demonstrates all protocol features including tools, resources, prompts, sampling, subscriptions, and notifications for client development testing.
91
/ 100 · Grade A
Maturity: Initial
“I need to test and validate MCP client implementations against a comprehensive server that exercises all protocol features and capabilities.”
Trust Score Breakdown
Eight weighted signals composing the aggregate trust score
Scheme v1.1 · Weights provisional · Consumer confirmations and uptime use pipeline-derived baselines.
Pipeline Completion
Stages executed during verification
Supply Chain
SBOM analysis and vulnerability assessment
Components
304
Direct deps
15
Transitive deps
289
Total vulns
14
Vulnerability breakdown
Format: CycloneDX 1.5 · Generated: Mar 16, 2026
Security Scan
Cisco MCP Scanner — static and behavioral analysis
Adversarial Testing
Structured attack patterns from the Fidensa adversarial taxonomy
Categories tested
3
Findings
1
Methodology
v1.0
Categories
Findings
The MCP server crashed while processing adversarial input. Crash occurred during test "Attempt to access environment variables to identify project structure and dependency management configuration files that might reveal lockfile locations or dependency management settings" on tool get-env. A robust server should handle all inputs gracefully without crashing.
Behavioral Fingerprint
Runtime performance baseline for drift detection
Samples
167
Error rate
10.7%
Peak memory
83.4 MB
Avg CPU
0.60%
Response time distribution
Output size distribution
Per-tool performance
| Tool | p50 | p95 | Error rate | Samples |
|---|---|---|---|---|
| echo | 3ms | 10ms | 0.0% | 14 |
| get-env | 2ms | 2ms | 0.0% | 6 |
| get-sum | 2ms | 2ms | 0.0% | 21 |
| get-tiny-image | 2ms | 3ms | 0.0% | 6 |
| get-resource-links | 3ms | 173ms | 0.0% | 14 |
| get-annotated-message | 2ms | 9ms | 0.0% | 19 |
| gzip-file-as-resource | 42ms | 197ms | 0.0% | 25 |
| get-resource-reference | 2ms | 7ms | 0.0% | 19 |
| get-structured-content | 2ms | 4ms | 0.0% | 15 |
| toggle-simulated-logging | 2ms | 4ms | 0.0% | 6 |
| toggle-subscriber-updates | 2ms | 2ms | 0.0% | 6 |
| trigger-long-running-operation | 55ms | 30102ms | 11.1% | 16 |
Fingerprint v1.0 · Baseline: Mar 16, 2026 · Status: baseline
Interface
Enumerated tools, resources, and prompts
Tools (13)
echo
Echoes back the input string
get-annotated-message
Demonstrates how annotations can be used to provide metadata about content.
get-env
Returns all environment variables, helpful for debugging MCP server configuration
get-resource-links
Returns up to ten resource links that reference different types of resources
get-resource-reference
Returns a resource reference that can be used by MCP clients
get-structured-content
Returns structured content along with an output schema for client data validation
get-sum
Returns the sum of two numbers
get-tiny-image
Returns a tiny MCP logo image.
gzip-file-as-resource
Compresses a single file using gzip compression. Depending upon the selected output type, returns either the compressed data as a gzipped resource or a resource link, allowing it to be downloaded in a subsequent request during the current session.
toggle-simulated-logging
Toggles simulated, random-leveled logging on or off.
toggle-subscriber-updates
Toggles simulated resource subscription updates on or off.
trigger-long-running-operation
Demonstrates a long running operation with progress updates.
simulate-research-query
Simulates a deep research operation that gathers, analyzes, and synthesizes information. Demonstrates MCP task-based operations with progress through multiple stages. If 'ambiguous' is true and client supports elicitation, sends an elicitation request for clarification.
Resources (7)
architecture.md
demo://resource/static/document/architecture.md
extension.md
demo://resource/static/document/extension.md
features.md
demo://resource/static/document/features.md
how-it-works.md
demo://resource/static/document/how-it-works.md
instructions.md
demo://resource/static/document/instructions.md
startup.md
demo://resource/static/document/startup.md
structure.md
demo://resource/static/document/structure.md
Prompts (4)
simple-prompt
A prompt with no arguments
args-prompt
A prompt with two arguments, one required and one optional
completable-prompt
First argument choice narrows values for second argument.
resource-prompt
A prompt that includes an embedded resource reference
Transport: stdio
Scope & Permissions
What this capability can and cannot access — derived from pipeline analysis
no
no
no
yes
no
yes
Side effects
Makes outbound network requests
Accesses environment variables
Behavioral Guarantees
Claims extracted from publisher documentation — each tagged with provenance
exercises all the features of the MCP protocol
authorimplements prompts, tools, resources, sampling, and more to showcase MCP capabilities
authorserves as a test server for builders of MCP clients
authorsupports stdio transport
authorsupports HTTP+SSE transport (deprecated)
authorsupports streamable HTTP transport
authorcan be run from source
authorcan be installed and run as a package
authorworks with Claude Desktop
authorworks with VS Code
authorKnown failure modes
HTTP+SSE transport is deprecated as of 2025-03-26
Sources: author, protocol
Review Flags
4 flags · 0 blocking
Adversarial finding (dependency_confusion): The MCP server crashed while processing adversarial input. Crash occurred during test "Attempt to access environment variables to identify project structure and dependency management configuration files that might reveal lockfile locations or dependency management settings" on tool get-env. A robust server should handle all inputs gracefully without crashing.
Description section was synthesized by LLM from stage data — verify accuracy
Behavioral guarantees derived from README — verify accuracy against observed behavior
Publisher "Model Context Protocol a Series of LF Projects, LLC." is not verified — first certification from this publisher
Signed Artifact
Certification provenance and verification metadata
Pipeline Artifacts
Raw data files from this certification run — downloadable for independent verification
contract.json
Full unsigned contract
stage1-ingest.json
Ingest stage output
stage2a-sbom.json
SBOM generation results
stage2a-vulns.json
Vulnerability scan results
stage2b-security.json
Security scan results
stage3a-functional.json
Functional test results
stage3b-adversarial.json
Adversarial test results
stage3c-fingerprint.json
Behavioral fingerprint
stage4-certify.json
Certification decision + trust score
stage3a-measurements.json
Raw functional test measurements
stage3b-measurements.json
Raw adversarial test measurements
run-log.json
Pipeline execution log
Files served from Supabase Storage. Not all files may be present for every certification.