Tower-native Model Context Protocol (MCP) implementation
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 1 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
interop_add
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 444a90e · analyzer v33 · 1d ago
skills & prompt files 1
- agent-rules joshrotenberg-tower-mcp-444a90e/AGENTS.md
danger signals1
- committed secret private key joshrotenberg-tower-mcp-444a90e/crates/tower-mcp/tests/fixtures/rsa_private.pem :1
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 200
network 1
- net joshrotenberg-tower-mcp-444a90e/tools/sdk-interop/typescript/server.mjs :1
import { createServer } from 'node:http';
tool registrations 2
- interop_add joshrotenberg-tower-mcp-444a90e/tools/sdk-interop/python/server.py :9
- interop_add joshrotenberg-tower-mcp-444a90e/tools/sdk-interop/typescript/server.mjs :14
declared dependencies 29
- @modelcontextprotocol/client@2.0.0
- @modelcontextprotocol/node@2.0.0
- @modelcontextprotocol/server@2.0.0
- zod@4.4.3
- tower-mcp@0.22
- tower-mcp-types@0.22
- tower-mcp-macros@0.22
- serde@1.0
- serde_json@1.0
- schemars@1.2
- tokio@1
- tracing@0.1
show 17 more
- tracing-subscriber@0.3
- clap@4
- axum@0.8
- thiserror@2
- base64@0.23.0
- indexmap@2
- tokio-tungstenite@0.30
- sha2@0.11
- getrandom@0.4
- url@2
- urlencoding@2
- tower@0.5
- tower-service@0.3
- tower-resilience@0.13.0
- futures@0.3
- async-trait@0.1
- tokio-util@0.7