mcp-tester Adds Rug-Pull Detection and an A–F 'LLM Readiness Score' for MCP Servers

GitHub·medium signalXBlueskyLinkedInCopy link

Posted to HN on August 9, mcp-tester is a self-hosted web inspector for any MCP server that reports fetch latency with per-phase timing breakdowns and token-usage estimates across multiple providers. Its security layer runs heuristic tool-poisoning checks for hidden Unicode, prompt-injection phrasing, and credential-exfiltration hints, plus rug-pull detection that flags when a server's tool definitions change between connections — the specific failure mode that vetting-at-install-time cannot catch. It also grades tool definitions A–F on description quality, parameter documentation, type definitions, required annotations, and schema specificity. Install with `pip install remote-mcp-server-tester`.