github C# re-analysis due

modelcontextprotocol/csharp-sdk

The official C# SDK for Model Context Protocol servers and clients. Maintained in collaboration with Microsoft.

maintainer: modelcontextprotocol
licence: NOASSERTION
first seen: 2026-06-01
last seen: 2026-09-14
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit cb3e6e8 · analyzer v33 · 1w ago

skills & prompt files 9

code evidence vv2.2.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 710

filesystem 4

fs (weak) modelcontextprotocol-csharp-sdk-cb3e6e8/scripts/finalize-docs-site.mjs :10 import { readFile, writeFile, mkdir, copyFile, readdir } from "node:fs/promises";
fs (weak) modelcontextprotocol-csharp-sdk-cb3e6e8/scripts/get-docs-version-slug.mjs :6 import { readFile } from "node:fs/promises";
fs (weak) modelcontextprotocol-csharp-sdk-cb3e6e8/scripts/inject-version-picker.mjs :12 import { readFile, writeFile, readdir } from "node:fs/promises";
fs (weak) modelcontextprotocol-csharp-sdk-cb3e6e8/scripts/list-versions.mjs :6 import { readFile } from "node:fs/promises";

network 1

net (weak) modelcontextprotocol-csharp-sdk-cb3e6e8/docs/version-picker/version-picker.js :81 const res = await fetch(candidate, { method: "HEAD" });

declared dependencies 54

@modelcontextprotocol/conformance@0.2.0-alpha.9
@modelcontextprotocol/server-everything@2026.1.26
@modelcontextprotocol/server-memory@2026.1.26
OpenTelemetry@*
OpenTelemetry.Extensions.Hosting@*
OpenTelemetry.Instrumentation.AspNetCore@*
OpenTelemetry.Instrumentation.Http@*
Microsoft.Extensions.AI@$(MicrosoftExtensionsVersion)
Microsoft.Extensions.AI.Abstractions@$(MicrosoftExtensionsVersion)
Microsoft.Extensions.Caching.Abstractions@$(System10Version)
Microsoft.Extensions.Caching.Memory@$(System10Version)
Microsoft.Extensions.Hosting.Abstractions@$(System10Version)

show 28 more

Microsoft.Extensions.Logging.Abstractions@$(System10Version)
System.Net.ServerSentEvents@$(System10Version)
Microsoft.Bcl.Memory@$(System10Version)
System.Collections.Immutable@$(System10Version)
System.Diagnostics.DiagnosticSource@$(System10Version)
System.IO.Pipelines@$(System10Version)
System.Text.Json@$(System10Version)
System.Threading.Channels@$(System10Version)
Microsoft.AspNetCore.Authentication.JwtBearer@$(System8Version)
Microsoft.IdentityModel.Tokens@8.14.0
Microsoft.CodeAnalysis.CSharp@4.8.0
Microsoft.CodeAnalysis.Analyzers@3.3.4
Microsoft.SourceLink.GitHub@8.0.0
Anthropic@12.40.0
Azure.Monitor.OpenTelemetry.AspNetCore@1.6.0
coverlet.collector@10.0.1
Microsoft.Extensions.AI.OpenAI@$(MicrosoftExtensionsVersion)
Microsoft.Extensions.DependencyInjection@$(System10Version)
Microsoft.Extensions.Hosting@$(System10Version)
Microsoft.Extensions.Logging@$(System10Version)
Microsoft.Extensions.Logging.Console@$(System10Version)
Microsoft.Extensions.Options@$(System10Version)
Microsoft.Extensions.TimeProvider.Testing@10.1.0
Microsoft.NET.Test.Sdk@18.8.1
Moq@4.20.72
OpenTelemetry@1.17.0
OpenTelemetry.Exporter.InMemory@1.17.0
OpenTelemetry.Exporter.OpenTelemetryProtocol@1.17.0

14 more not shown — this panel samples each group; the count above is the real total.