← Back to search Server uses network capabilities via: http, httpx, requests, socket, urllib, websocket Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile Server uses shell capabilities via: subprocess Server uses database capabilities via: asyncpg Server uses env_vars capabilities via: os.environ, os.getenv()
modelcontextprotocol/python-sdk
PyPI MCP Registry ↗
D
40 / 100
Versions
1.27.1 latest May 8, 2026
1.27.0 Apr 2, 2026
1.26.0 Jan 24, 2026
1.25.0 Dec 18, 2025
1.24.0 Dec 12, 2025
+ show 50 more show less
1.23.3 Dec 9, 2025
1.23.2 Dec 4, 2025
1.23.1 Dec 2, 2025
1.23.0 Dec 2, 2025
1.22.0 Nov 20, 2025
1.21.2 Nov 17, 2025
1.21.1 Nov 13, 2025
1.21.0 Nov 6, 2025
1.20.0 Oct 30, 2025
1.19.0 Oct 24, 2025
1.18.0 Oct 16, 2025
1.17.0 Oct 9, 2025
1.16.0 Oct 2, 2025
1.15.0 Sep 25, 2025
1.14.1 Sep 18, 2025
1.14.0 Sep 11, 2025
1.13.1 Aug 21, 2025
1.13.0 Aug 14, 2025
1.12.4 Aug 7, 2025
1.12.3 Jul 31, 2025
1.12.2 Jul 24, 2025
1.12.1 Jul 22, 2025
1.12.0 Jul 17, 2025
1.11.0 Jul 10, 2025
1.10.1 Jun 27, 2025
1.10.0 Jun 26, 2025
1.9.4 Jun 12, 2025
1.9.3 Jun 5, 2025
1.9.2 May 29, 2025
1.9.1 May 22, 2025
1.9.0 May 15, 2025
1.8.1 May 12, 2025
1.8.0 May 8, 2025
1.7.1 May 2, 2025
1.7.0 May 1, 2025
1.6.0 Mar 27, 2025
1.5.0 Mar 21, 2025
1.4.1 Mar 14, 2025
1.4.0 Mar 13, 2025
1.3.0 Feb 20, 2025
1.3.0rc1 Feb 13, 2025
1.2.1 Jan 27, 2025
1.2.0 Jan 3, 2025
1.1.3 Jan 3, 2025
1.2.0rc1 Dec 23, 2024
1.1.2 Dec 12, 2024
1.1.1 Dec 9, 2024
1.1.0 Dec 3, 2024
1.0.0 Nov 25, 2024
0.9.1 Nov 20, 2024
Tools 106
defaults_tool annotations: none low
ctx Context
select_favorite_color annotations: none low
ctx Context
select_favorite_colors annotations: none low
ctx Context
select_color_legacy annotations: none low
ctx Context
tool annotations: none low
ctx Context
request_api_key annotations: none low
ctx Context
oauth_flow annotations: none low
ctx Context
payment_flow annotations: none low
ctx Context
setup_credentials annotations: none low
ctx Context
check_url_response annotations: none low
ctx Context
ask_name annotations: none low
ctx Context
trigger_elicitation annotations: none low
ctx Context
test_decline annotations: none low
ctx Context
test_cancel annotations: none low
ctx Context
use_deprecated_elicit annotations: none low
ctx Context
direct_elicit_url annotations: none low
ctx Context
delete_file annotations: none low
path str
query_db annotations: none low
Tool that uses initialized resources
ctx string
dummy_tool_func annotations: none low
sleep_tool annotations: none low
trigger annotations: none low
test_tool annotations: none low
A test tool with an icon.
message str
multi_icon_tool annotations: none low
A tool with multiple icons.
test_sampling_tool annotations: none low
ctx Context message str
test_list_roots annotations: none low
context Context message str
test_tool_with_log annotations: none low
Send a log notification to the client.
ctx Context level string logger str message str
test_tool_with_log_dict annotations: none low
Send a log notification with a dict payload.
ctx Context level string logger str
check_context annotations: none low
Return the contextvar value visible to the handler.
get_weather annotations: none low
Get weather for a city - returns structured data.
city str
get_location annotations: none low
Get location coordinates
address str
get_statistics annotations: none low
Get various statistics
data_type str
get_user annotations: none low
Get user profile - returns structured data
user_id str
get_config annotations: none low
This returns unstructured output - no schema generated
list_cities annotations: none low
Get a list of cities
get_temperature annotations: none low
Get temperature as a simple float
city str
api_status annotations: none low
Get API status
send_message annotations: none low
Send a chat message
message str
hello annotations: none low
A simple hello tool
domain_info annotations: none low
Get domain-specific information
add_two annotations: none low
Tool to add two to the input
n int
add annotations: none low
Add two numbers
a int b int
create_thumbnail annotations: none low
Create a thumbnail from an image
image_path str
generate_poem annotations: none low
Generate a poem using LLM sampling.
ctx Context topic str
check_lifespan annotations: none low
Tool that checks lifespan context.
ctx Context
connect_service annotations: none low
ctx Context service_name str
multi_auth annotations: none low
ctx Context
failing_tool annotations: none low
ctx Context
greet annotations: none low
A greeting tool
name str title str
basic_tool annotations: none low
message str
tool_with_title annotations: none low
message str
tool_with_annotations annotations: none low
message str
tool_with_both annotations: none low
message str
hello_world annotations: none low
name str
sum annotations: none low
x int y int
tool_with_resource annotations: none low
ctx Context
echo annotations: none low
Echo a message back.
message str
upload_file annotations: none low
Upload a file.
filename str
analyze_text annotations: none low
Analyze text content.
text str
tool1 annotations: none low
First tool.
x int
tool2 annotations: none low
Second tool.
y str
tool3 annotations: none low
Third tool without metadata.
z bool
combined_tool annotations: none low
Tool with both metadata and annotations.
data str
ask_user annotations: none low
ctx Context prompt str
optional_tool annotations: none low
ctx Context
invalid_optional_tool annotations: none low
ctx Context
valid_multiselect_tool annotations: none low
ctx Context
optional_multiselect_tool annotations: none low
ctx Context
book_table annotations: none low
Book a table with date availability check. This demonstrates form mode elicitation for collecting non-sensitive user input.
ctx Context date str time str party_size int
secure_payment annotations: none low
Process a secure payment requiring URL confirmation. This demonstrates URL mode elicitation using ctx.elicit_url() for operations that require out-of-band user interaction.
ctx Context amount float
process_data annotations: none low
Process data with logging.
ctx Context data str
long_running_task annotations: none low
Execute a task with progress updates.
ctx Context steps int task_name str
advanced_tool annotations: none low
Return CallToolResult directly for full control including _meta field.
validated_tool annotations: none low
Return CallToolResult with structured output validation.
empty_result_tool annotations: none low
For empty results, return CallToolResult with empty content.
test_simple_text annotations: none low
Tests simple text content response
test_image_content annotations: none low
Tests image content response
test_audio_content annotations: none low
Tests audio content response
test_embedded_resource annotations: none low
Tests embedded resource content response
test_multiple_content_types annotations: none low
Tests response with multiple content types (text, image, resource)
test_tool_with_logging annotations: none low
Tests tool that emits log messages during execution
ctx Context
test_tool_with_progress annotations: none low
Tests tool that reports progress notifications
ctx Context
test_sampling annotations: none low
Tests server-initiated sampling (LLM completion request)
ctx Context prompt str
test_elicitation annotations: none low
Tests server-initiated elicitation (user input request)
ctx Context message str
test_elicitation_sep1034_defaults annotations: none low
Tests elicitation with default values for all primitive types (SEP-1034)
ctx Context
test_elicitation_sep1330_enums annotations: none low
Tests elicitation with enum schema variations per SEP-1330
ctx Context
test_error_handling annotations: none low
Tests error response handling
test_reconnection annotations: none low
Tests SSE polling by closing stream mid-call (SEP-1699)
ctx Context
get_time annotations: none low
Get the current server time. This tool demonstrates that system information can be protected by OAuth authentication. User must be authenticated to access it.
get_weather_summary annotations: none low
Get a brief weather summary for a city
city str
get_weather_metrics annotations: none low
Get weather metrics for multiple cities Returns a dictionary mapping city names to their metrics
cities string
get_weather_alerts annotations: none low
Get active weather alerts for a region
region str
get_weather_stats annotations: none low
Get weather statistics for the past N days
city str days int
hello_unicode annotations: none low
A simple tool that demonstrates Unicode handling in: - Tool description (emojis, accents, CJK characters) - Parameter defaults (CJK characters) - Return values (Spanish punctuation, emojis)
name str greeting str
list_emoji_categories annotations: none low
Returns a list of emoji categories with emoji examples.
multilingual_hello annotations: none low
Returns hello in different scripts and writing systems.
remember annotations: none low
contents string
read_profile annotations: none low
text_me annotations: none low
Send a text message to a phone number via https://surgemsg.com/
text_content str
take_screenshot annotations: none low
Take a screenshot of the user's screen and return it as an image. Use this tool anytime the user wants you to look at something they're doing.
greet_user annotations: none low
Greet a user with optional title and repetition
name str times int title str
echo_tool annotations: none low
Echo the input text
text str
demo_tool annotations: none low
A demo tool with an icon.
message str
name_shrimp annotations: none low
List all shrimp names in the tank
tank ShrimpTank extra_names string
my_tool annotations: none low
tool_with_context annotations: none low
async_tool annotations: none low
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 532
info
Tool: select_favorite_color
info
Tool: direct_elicit_url
info
Tool: delete_file
low
Tool 'get_location' has no annotations
info
Tool: select_favorite_colors
info
Tool: select_color_legacy
info
Tool: tool
info
Tool: test_sampling_tool
info
Tool: query_db
info
Tool: request_api_key
info
Tool: oauth_flow
info
Tool: dummy_tool_func
info
Tool: payment_flow
info
Tool: test_list_roots
info
Tool: setup_credentials
info
Tool: check_url_response
info
Tool: sleep_tool
info
Tool: ask_name
info
Tool: trigger_elicitation
info
Tool: test_decline
info
Tool: test_cancel
info
Tool: use_deprecated_elicit
info
Tool: test_audio_content
info
Tool: test_embedded_resource
low
Tool 'payment_flow' has no annotations
info
Tool: trigger
info
Tool: test_multiple_content_types
info
Tool: test_tool_with_logging
info
Tool: text_me
info
Tool: tool1
info
Tool: tool2
info
Tool: tool3
low
Tool 'get_weather' has no annotations
info
Tool: combined_tool
info
Tool: test_simple_text
info
Tool: ask_user
info
Tool: optional_tool
info
Tool: test_image_content
info
Tool: test_tool
info
Tool: multi_icon_tool
info
Tool: empty_result_tool
info
Tool: invalid_optional_tool
low
Tool 'tool_with_resource' has no annotations
low
Tool 'echo' has no annotations
low
Tool 'upload_file' has no annotations
low
Tool 'analyze_text' has no annotations
low
Tool 'tool1' has no annotations
low
Tool 'tool2' has no annotations
low
Tool 'tool3' has no annotations
low
Tool 'combined_tool' has no annotations
low
Tool 'ask_user' has no annotations
low
Tool 'optional_tool' has no annotations
low
Tool 'invalid_optional_tool' has no annotations
low
Tool 'valid_multiselect_tool' has no annotations
low
Tool 'optional_multiselect_tool' has no annotations
low
Tool 'defaults_tool' has no annotations
low
Tool 'select_favorite_color' has no annotations
low
Tool 'select_favorite_colors' has no annotations
low
Tool 'select_color_legacy' has no annotations
low
Tool 'tool' has no annotations
low
Tool 'request_api_key' has no annotations
low
Tool 'oauth_flow' has no annotations
info
Tool: valid_multiselect_tool
info
Tool: test_tool_with_log
info
Tool: test_tool_with_log_dict
info
Tool: check_context
info
Tool: get_weather
info
Tool: get_location
info
Tool: get_statistics
info
Tool: get_user
info
Tool: get_config
info
Tool: list_cities
info
Tool: get_temperature
info
Tool: api_status
info
Tool: send_message
info
Tool: hello
info
Tool: domain_info
info
Tool: add_two
info
Tool: add
info
Tool: optional_multiselect_tool
info
Tool: generate_poem
info
Tool: create_thumbnail
info
Tool: book_table
info
Tool: secure_payment
info
Tool: process_data
info
Tool: long_running_task
info
Tool: advanced_tool
info
Tool: validated_tool
info
pyproject.toml metadata
info
Tool: check_lifespan
info
Tool: connect_service
info
Tool: multi_auth
info
Tool: failing_tool
info
Tool: greet
info
Tool: basic_tool
info
Tool: tool_with_title
info
Tool: tool_with_annotations
info
Tool: tool_with_both
info
Tool: hello_world
info
Tool: sum
info
Tool: tool_with_resource
info
Tool: echo
info
Tool: upload_file
info
Tool: test_tool_with_progress
info
Tool: test_sampling
info
Tool: test_elicitation
info
Tool: test_elicitation_sep1034_defaults
info
Tool: test_elicitation_sep1330_enums
info
Tool: test_error_handling
info
Tool: test_reconnection
info
Tool: get_time
info
Tool: get_weather_summary
info
Tool: get_weather_metrics
info
Tool: get_weather_alerts
info
Tool: get_weather_stats
info
Tool: hello_unicode
info
Tool: list_emoji_categories
info
Tool: multilingual_hello
info
Tool: remember
info
Tool: read_profile
info
Tool: take_screenshot
info
Tool: greet_user
info
Tool: echo_tool
info
Tool: demo_tool
info
Tool: name_shrimp
info
Tool: my_tool
info
Tool: tool_with_context
info
Tool: async_tool
info
Transport: streamable-http
info
Required env vars (8)
low
Tool 'check_lifespan' has no annotations
low
Tool 'connect_service' has no annotations
low
Tool 'multi_auth' has no annotations
low
Tool 'failing_tool' has no annotations
low
Tool 'greet' has no annotations
low
Tool 'basic_tool' has no annotations
low
Tool 'tool_with_title' has no annotations
low
Tool 'tool_with_annotations' has no annotations
low
Tool 'tool_with_both' has no annotations
low
Tool 'hello_world' has no annotations
low
Tool 'sum' has no annotations
low
Tool 'setup_credentials' has no annotations
low
Tool 'check_url_response' has no annotations
low
Tool 'ask_name' has no annotations
low
Tool 'trigger_elicitation' has no annotations
low
Tool 'test_decline' has no annotations
low
Tool 'test_cancel' has no annotations
low
Tool 'use_deprecated_elicit' has no annotations
low
Tool 'direct_elicit_url' has no annotations
low
Tool 'delete_file' has no annotations
low
Tool 'query_db' has no annotations
low
Tool 'dummy_tool_func' has no annotations
low
Tool 'sleep_tool' has no annotations
low
Tool 'trigger' has no annotations
low
Tool 'test_tool' has no annotations
low
Tool 'multi_icon_tool' has no annotations
low
Tool 'test_sampling_tool' has no annotations
low
Tool 'test_list_roots' has no annotations
low
Tool 'test_tool_with_log' has no annotations
low
Tool 'test_tool_with_log_dict' has no annotations
low
Tool 'check_context' has no annotations
low
Tool 'get_statistics' has no annotations
low
Tool 'get_user' has no annotations
low
Tool 'get_config' has no annotations
low
Tool 'list_cities' has no annotations
low
Tool 'get_temperature' has no annotations
low
Tool 'api_status' has no annotations
low
Tool 'send_message' has no annotations
low
Tool 'hello' has no annotations
low
Tool 'domain_info' has no annotations
low
Tool 'add_two' has no annotations
low
Tool 'add' has no annotations
low
Tool 'generate_poem' has no annotations
low
Tool 'create_thumbnail' has no annotations
low
Tool 'book_table' has no annotations
low
Tool 'secure_payment' has no annotations
low
Tool 'process_data' has no annotations
low
Tool 'long_running_task' has no annotations
low
Tool 'advanced_tool' has no annotations
low
Tool 'validated_tool' has no annotations
low
Tool 'empty_result_tool' has no annotations
low
Tool 'test_simple_text' has no annotations
low
Tool 'test_image_content' has no annotations
low
Tool 'test_audio_content' has no annotations
low
Tool 'test_embedded_resource' has no annotations
low
Tool 'test_multiple_content_types' has no annotations
low
Tool 'test_tool_with_logging' has no annotations
low
Tool 'test_tool_with_progress' has no annotations
low
Tool 'test_sampling' has no annotations
low
Tool 'test_elicitation' has no annotations
low
Tool 'test_elicitation_sep1034_defaults' has no annotations
low
Tool 'test_elicitation_sep1330_enums' has no annotations
low
Tool 'test_error_handling' has no annotations
low
Tool 'test_reconnection' has no annotations
low
Tool 'get_time' has no annotations
low
Tool 'get_weather_summary' has no annotations
low
Tool 'get_weather_metrics' has no annotations
low
Tool 'get_weather_alerts' has no annotations
low
Tool 'get_weather_stats' has no annotations
low
Tool 'hello_unicode' has no annotations
low
Tool 'list_emoji_categories' has no annotations
low
Tool 'multilingual_hello' has no annotations
low
Tool 'remember' has no annotations
low
Tool 'read_profile' has no annotations
low
Tool 'text_me' has no annotations
low
Tool 'take_screenshot' has no annotations
low
Tool 'greet_user' has no annotations
low
Tool 'echo_tool' has no annotations
low
Tool 'demo_tool' has no annotations
low
Tool 'name_shrimp' has no annotations
low
Tool 'my_tool' has no annotations
low
Tool 'tool_with_context' has no annotations
low
Tool 'async_tool' has no annotations
high
Hardcoded OAuth client secret in tests/client/test_auth.py
high
Hardcoded OAuth client secret in tests/client/auth/extensions/test_client_credentials.py
high
Hardcoded OAuth client secret in src/mcp/client/auth/extensions/client_credentials.py
medium
Permission: network access detected
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2023-48)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2026-161)
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
medium
Excessive dependency count: 90 direct dependencies
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (PYSEC-2022-183)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-2c2j-9gv5-cj73)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-74m5-2c7w-9w3x)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-f96h-pmfr-66vw)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-2c2j-9gv5-cj73)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-74m5-2c7w-9w3x)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-f96h-pmfr-66vw)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2023-48)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2026-161)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-151)
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2)
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (PYSEC-2021-112)
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151)
critical
Database URL with Password found in examples/mcpserver/memory.py
info
SLSA Build Level 2 detected
high
High-risk OAuth scope: admin
info
Could not connect to MCP server for output poisoning scan
info
Could not connect to MCP server for behavioral verification
info
SBOM generated: 4 components
info
MITRE ATLAS technique coverage summary
info
ATLAS: Adversarial ML Supply Chain (AML.T0043)
info
ATLAS: Poison Training Data (AML.T0020)
info
Tool: defaults_tool
info
Tool: analyze_text
high
Permission: shell access detected
info
pyproject.toml metadata
info
Tool: check_lifespan
info
Tool: connect_service
info
Tool: multi_auth
info
Tool: failing_tool
info
Tool: tool_with_title
info
Tool: tool_with_annotations
info
Tool: tool_with_both
info
Tool: hello_world
info
Tool: sum
info
Tool: tool_with_resource
info
Tool: upload_file
info
Tool: analyze_text
info
Tool: tool1
info
Tool: tool2
info
Tool: tool3
info
Tool: combined_tool
info
Tool: ask_user
info
Tool: optional_tool
info
Tool: invalid_optional_tool
info
Tool: valid_multiselect_tool
info
Tool: optional_multiselect_tool
info
Tool: defaults_tool
info
Tool: select_favorite_color
info
Tool: select_favorite_colors
info
Tool: select_color_legacy
info
Tool: tool
info
Tool: request_api_key
info
Tool: oauth_flow
info
Tool: payment_flow
info
Tool: setup_credentials
info
Tool: check_url_response
info
Tool: ask_name
info
Tool: trigger_elicitation
info
Tool: test_decline
info
Tool: test_cancel
info
Tool: use_deprecated_elicit
info
Tool: direct_elicit_url
info
Tool: delete_file
info
Tool: query_db
info
Tool: dummy_tool_func
info
Tool: trigger
info
Tool: sleep_tool
info
Tool: multi_icon_tool
info
Tool: basic_tool
info
Tool: test_sampling_tool
info
Tool: test_list_roots
info
Tool: test_tool
info
Tool: test_tool_with_log
info
Tool: test_tool_with_log_dict
info
Tool: greet
info
Tool: check_context
info
Tool: get_weather
info
Tool: get_location
info
Tool: get_statistics
info
Tool: get_user
info
Tool: get_config
info
Tool: list_cities
info
Tool: api_status
info
Tool: send_message
info
Tool: hello
info
Tool: domain_info
info
Tool: add_two
info
Tool: add
info
Tool: generate_poem
info
Tool: create_thumbnail
info
Tool: book_table
info
Tool: secure_payment
info
Tool: long_running_task
info
Tool: advanced_tool
info
Tool: validated_tool
info
Tool: empty_result_tool
info
Tool: process_data
info
Tool: test_simple_text
info
Tool: test_image_content
info
Tool: test_audio_content
info
Tool: test_embedded_resource
info
Tool: test_multiple_content_types
info
Tool: test_tool_with_logging
info
Tool: test_tool_with_progress
info
Tool: test_sampling
info
Tool: test_elicitation
info
Tool: test_elicitation_sep1034_defaults
info
Tool: test_elicitation_sep1330_enums
info
Tool: test_error_handling
info
Tool: test_reconnection
info
Tool: get_time
info
Tool: get_weather_summary
info
Tool: get_weather_metrics
info
Tool: get_weather_alerts
info
Tool: get_temperature
info
Tool: get_weather_stats
info
Tool: hello_unicode
info
Tool: list_emoji_categories
info
Tool: multilingual_hello
info
Tool: remember
info
Tool: read_profile
info
Tool: echo
info
Tool: text_me
info
Tool: take_screenshot
info
Tool: greet_user
info
Tool: echo_tool
info
Tool: demo_tool
info
Tool: name_shrimp
info
Tool: my_tool
info
Tool: tool_with_context
info
Tool: async_tool
info
Transport: streamable-http
info
Required env vars (8)
low
Tool 'check_lifespan' has no annotations
low
Tool 'multi_auth' has no annotations
low
Tool 'failing_tool' has no annotations
low
Tool 'tool_with_title' has no annotations
low
Tool 'tool_with_annotations' has no annotations
low
Tool 'tool_with_both' has no annotations
low
Tool 'hello_world' has no annotations
low
Tool 'tool_with_resource' has no annotations
low
Tool 'upload_file' has no annotations
low
Tool 'analyze_text' has no annotations
low
Tool 'tool1' has no annotations
low
Tool 'tool2' has no annotations
low
Tool 'tool3' has no annotations
low
Tool 'combined_tool' has no annotations
low
Tool 'ask_user' has no annotations
low
Tool 'optional_tool' has no annotations
low
Tool 'invalid_optional_tool' has no annotations
low
Tool 'valid_multiselect_tool' has no annotations
low
Tool 'optional_multiselect_tool' has no annotations
low
Tool 'defaults_tool' has no annotations
low
Tool 'select_favorite_color' has no annotations
low
Tool 'select_favorite_colors' has no annotations
low
Tool 'select_color_legacy' has no annotations
low
Tool 'tool' has no annotations
low
Tool 'request_api_key' has no annotations
low
Tool 'oauth_flow' has no annotations
low
Tool 'payment_flow' has no annotations
low
Tool 'setup_credentials' has no annotations
low
Tool 'check_url_response' has no annotations
low
Tool 'ask_name' has no annotations
low
Tool 'trigger_elicitation' has no annotations
low
Tool 'test_decline' has no annotations
low
Tool 'test_cancel' has no annotations
low
Tool 'use_deprecated_elicit' has no annotations
low
Tool 'direct_elicit_url' has no annotations
low
Tool 'delete_file' has no annotations
low
Tool 'greet' has no annotations
low
Tool 'query_db' has no annotations
low
Tool 'dummy_tool_func' has no annotations
low
Tool 'trigger' has no annotations
low
Tool 'sleep_tool' has no annotations
low
Tool 'basic_tool' has no annotations
low
Tool 'test_sampling_tool' has no annotations
low
Tool 'test_list_roots' has no annotations
low
Tool 'test_tool' has no annotations
low
Tool 'test_tool_with_log' has no annotations
low
Tool 'test_tool_with_log_dict' has no annotations
low
Tool 'check_context' has no annotations
low
Tool 'get_location' has no annotations
low
Tool 'get_statistics' has no annotations
low
Tool 'get_user' has no annotations
low
Tool 'get_config' has no annotations
low
Tool 'list_cities' has no annotations
low
Tool 'api_status' has no annotations
low
Tool 'send_message' has no annotations
low
Tool 'get_weather' has no annotations
low
Tool 'hello' has no annotations
low
Tool 'domain_info' has no annotations
low
Tool 'echo' has no annotations
low
Tool 'add_two' has no annotations
low
Tool 'add' has no annotations
low
Tool 'generate_poem' has no annotations
low
Tool 'create_thumbnail' has no annotations
low
Tool 'book_table' has no annotations
low
Tool 'secure_payment' has no annotations
low
Tool 'connect_service' has no annotations
low
Tool 'long_running_task' has no annotations
low
Tool 'advanced_tool' has no annotations
low
Tool 'validated_tool' has no annotations
low
Tool 'empty_result_tool' has no annotations
low
Tool 'process_data' has no annotations
low
Tool 'test_simple_text' has no annotations
low
Tool 'test_image_content' has no annotations
low
Tool 'test_audio_content' has no annotations
low
Tool 'test_embedded_resource' has no annotations
low
Tool 'test_multiple_content_types' has no annotations
low
Tool 'test_tool_with_logging' has no annotations
low
Tool 'test_tool_with_progress' has no annotations
low
Tool 'test_sampling' has no annotations
low
Tool 'test_elicitation' has no annotations
low
Tool 'test_elicitation_sep1034_defaults' has no annotations
low
Tool 'test_elicitation_sep1330_enums' has no annotations
low
Tool 'test_error_handling' has no annotations
low
Tool 'test_reconnection' has no annotations
low
Tool 'get_time' has no annotations
low
Tool 'get_weather_summary' has no annotations
low
Tool 'get_weather_metrics' has no annotations
low
Tool 'get_weather_alerts' has no annotations
low
Tool 'get_temperature' has no annotations
low
Tool 'get_weather_stats' has no annotations
low
Tool 'hello_unicode' has no annotations
low
Tool 'list_emoji_categories' has no annotations
low
Tool 'multilingual_hello' has no annotations
low
Tool 'remember' has no annotations
low
Tool 'read_profile' has no annotations
low
Tool 'text_me' has no annotations
low
Tool 'take_screenshot' has no annotations
low
Tool 'greet_user' has no annotations
low
Tool 'echo_tool' has no annotations
low
Tool 'demo_tool' has no annotations
low
Tool 'multi_icon_tool' has no annotations
low
Tool 'sum' has no annotations
low
Tool 'name_shrimp' has no annotations
low
Tool 'my_tool' has no annotations
low
Tool 'tool_with_context' has no annotations
low
Tool 'async_tool' has no annotations
high
Hardcoded OAuth client secret in tests/client/test_auth.py
high
Hardcoded OAuth client secret in tests/client/auth/extensions/test_client_credentials.py
high
Hardcoded OAuth client secret in src/mcp/client/auth/extensions/client_credentials.py
medium
Permission: network access detected
low
Permission: filesystem access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
medium
Excessive dependency count: 90 direct dependencies
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (PYSEC-2022-183)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-2c2j-9gv5-cj73)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-74m5-2c7w-9w3x)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-f96h-pmfr-66vw)
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2023-48)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-2c2j-9gv5-cj73)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-74m5-2c7w-9w3x)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-f96h-pmfr-66vw)
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2023-48)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-151)
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2)
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (PYSEC-2021-112)
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151)
critical
Database URL with Password found in examples/mcpserver/memory.py
info
SLSA Build Level 2 detected
high
High-risk OAuth scope: admin
info
Could not connect to MCP server for output poisoning scan
info
Could not connect to MCP server for behavioral verification
info
SBOM generated: 4 components
info
MITRE ATLAS technique coverage summary
info
ATLAS: Adversarial ML Supply Chain (AML.T0043)
info
ATLAS: Poison Training Data (AML.T0020)