Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"mcp-observatory": {
"args": [
"-y",
"@kryptosai/mcp-observatory",
"serve"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
The first testing tool that is itself an MCP server. Your AI agent can scan, test, record, replay, and verify other MCP servers autonomously — catching regressions, schema drift, and security issues without human intervention.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@kryptosai/mcp-observatory' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @kryptosai/mcp-observatory against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools / security
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode
MCP server for using the GitLab API
MCP Security Weekly
Get CVE alerts and security updates for io.github.KryptosAI/mcp-observatory and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
███╗ ███╗ ██████╗██████╗
████╗ ████║██╔════╝██╔══██╗
██╔████╔██║██║ ██████╔╝
██║╚██╔╝██║██║ ██╔═══╝
██║ ╚═╝ ██║╚██████╗██║
╚═╝ ╚═╝ ╚═════╝╚═╝
O B S E R V A T O R Y
The first testing tool that is itself an MCP server. Your AI agent can scan, test, record, replay, and verify other MCP servers autonomously — catching regressions, schema drift, and security issues without human intervention.
Use it as a CLI, a CI action, or give it to your agent as an MCP server and let it test your other servers for you.
Scan every MCP server in your Claude config:
npx @kryptosai/mcp-observatory
Go deeper — also invoke safe tools to verify they actually run:
npx @kryptosai/mcp-observatory scan deep
Test a specific server:
npx @kryptosai/mcp-observatory test npx -y @modelcontextprotocol/server-everything
Add it to Claude Code as an MCP server:
claude mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatory serve
Or add it manually to your config:
{
"mcpServers": {
"mcp-observatory": {
"command": "npx",
"args": ["-y", "@kryptosai/mcp-observatory", "serve"]
}
}
}
| Command | What it does |
|---|---|
scan | Auto-discover servers from config files and check them all (default) |
scan deep | Scan and also invoke safe tools to verify they execute |
test <cmd> | Test a specific server by command |
record <cmd> | Record a server session to a cassette file for offline replay |
replay <cassette> | Replay a cassette offline — no live server needed |
verify <cassette> <cmd> | Verify a live server still matches a recorded cassette |
diff <base> <head> | Compare two run artifacts for regressions and schema drift |
watch <config> | Watch a server for changes, alert on regressions |
suggest | Detect your stack and recommend MCP servers from the registry |
serve | Start as an MCP server for AI agents |
lock | Snapshot MCP server schemas into a lock file |
lock verify | Verify live servers match the lock file |
history | Show health score trends for your MCP servers |
ci-report | Generate CI report for GitHub issue creation |
score <cmd> | Score an MCP server's health (0-100) |
badge <cmd> | Generate an SVG health score badge for README |
Run with no arguments for an interactive menu:
Check capabilities — connects to a server and verifies tools, prompts, and resources respond correctly.
Invoke tools — goes beyond listing. Actually calls safe tools (no required params / readOnlyHint) and reports which ones work and which ones crash.
npx @kryptosai/mcp-observatory scan deep
Detect schema drift — diffs two runs and surfaces added/removed fields, type ch