Verify MCP tool annotations match actual behavior. Detect annotation drift in Model Context Protocol servers.
MCPpedia last refreshed this data
Hintlint is an MCP server that verify MCP tool annotations match actual behavior. Detect annotation drift in Model Context Protocol servers. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 85/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"hintlint": {
"args": [
"-y",
"hintlint"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP servers declare tool annotations — readOnlyHint, destructiveHint, openWorldHint — that tell agent runtimes which tools need human approval. Nothing verifies these annotations are accurate. HintLint does.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'hintlint' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked hintlint against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools / ai-ml
MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
An autonomous agent that conducts deep research on any data using any LLM providers
Chrome DevTools for coding agents
MCP Security Weekly
Get CVE alerts and security updates for Hintlint and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.