Visual testing tool for MCP servers
Drift inferred · capture-to-capture
tool count over time
08-11 16:01 now
4t
0t
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 2e90a62 · analyzer v33 · 55m ago
skills & prompt files 12
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/board-ops/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/issue-create/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/issue-triage/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/local-dev/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/pr-flow/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/pre-push-gate/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/project-structure/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/release/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/test-servers/SKILL.md
- skill modelcontextprotocol-inspector-2e90a62/.claude/skills/testing/SKILL.md
- agent-rules modelcontextprotocol-inspector-2e90a62/AGENTS.md
- agent-rules modelcontextprotocol-inspector-2e90a62/CLAUDE.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 1235
filesystem 99
- fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/clear-stored-auth-for-relogin.test.ts :2
import * as fs from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/cli.test.ts :2
import { mkdtempSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/helpers/fixtures.ts :1
import * as fs from "fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/oauth-interactive.test.ts :11
import { rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/relogin-revocation.test.ts :17
import * as fs from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/stored-auth.test.ts :2
import { mkdtempSync, writeFileSync, readFileSync, rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/launcher/scripts/make-executable.js :4
import { promises as fs } from "fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/tui/__tests__/logger.test.ts :2
import { existsSync, mkdtempSync, rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/tui/__tests__/tsupConfig.test.ts :24
import { readFileSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/tui/__tests__/tui-servers.test.ts :8
} from "node:fs"; - fs modelcontextprotocol-inspector-2e90a62/clients/tui/tsup.config.ts :2
import { readFile } from "node:fs/promises"; - fs modelcontextprotocol-inspector-2e90a62/clients/web/server/ensure-web-build.ts :15
import { existsSync } from "node:fs";
show 28 more
- fs modelcontextprotocol-inspector-2e90a62/clients/web/server/sandbox-controller.ts :7
import { readFileSync } from "node:fs"; - fs modelcontextprotocol-inspector-2e90a62/clients/web/server/server.ts :8
import { readFileSync } from "node:fs"; - fs modelcontextprotocol-inspector-2e90a62/clients/web/server/vite-base-config.ts :11
import { rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/auth/oauth-persist-browser-safe.test.ts :2
import { readFileSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/client/config.test.ts :2
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/client/node-persistence.test.ts :2
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/client/runner.test.ts :2
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/mcp/node/config.test.ts :9
} from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/mcp/node/servers.test.ts :8
} from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/react/useServers.test.tsx :10
import { mkdtempSync, rmSync, writeFileSync, readFileSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/file-lock.test.ts :30
import { existsSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/file-secret-store.test.ts :12
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/secret-store-selection.test.ts :21
import { existsSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/storage.test.ts :13
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/revocation-e2e.test.ts :14
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-ema-e2e.test.ts :15
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-modern-era-oauth.test.ts :18
import { rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-direct-mid-session-e2e.test.ts :7
import { rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-e2e.test.ts :16
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-fetchFn.test.ts :12
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-remote-mid-session-e2e.test.ts :15
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-remote-storage-e2e.test.ts :16
import { mkdtempSync, rmSync, unlinkSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth.test.ts :12
import * as fs from "node:fs/promises"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/oauth-cimd-fixture.test.ts :2
import fs from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/oauth-resource-metadata-challenge.test.ts :16
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/client-store-route.test.ts :13
} from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/server-extra-coverage.test.ts :25
import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs"; - fs (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/servers-events.test.ts :24
} from "node:fs";
59 more not shown — this panel samples each group; the count above is the real total.
shell / exec 38
- shell (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/e2e.test.ts :2
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/clients/launcher/scripts/make-executable.js :6
import { execSync } from "child_process"; - shell modelcontextprotocol-inspector-2e90a62/clients/web/server/ensure-web-build.ts :17
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/file-lock.test.ts :28
import { execFile } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/remote-auth-branches.test.ts :144
* This used to sleep a flat 300ms, which had to cover a cold `spawn()`, node's - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/dependabot-alerts.mjs :56
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/dependency-refresh.mjs :42
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/gate-lease.mjs :62
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/gate-lease.test.mjs :10
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/install-clients.mjs :24
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/install-smoke-browser.mjs :29
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/announced-child.mjs :23
import { spawn } from "node:child_process";
show 26 more
- shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/child-cleanup.mjs :69
* @param {import("node:child_process").ChildProcess} child - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/claude-cli.mjs :5
// plain `spawnSync("claude", …)` reports ENOENT there even though the CLI is - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/ensure-test-servers.mjs :42
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/prod-web-server.mjs :22
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/prod-web-server.test.mjs :18
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/pty.mjs :32
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/render-smoke.mjs :24
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/resolve-node-bin.test.mjs :4
// against the packages the callers actually spawn (typescript, vite, prettier), - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/lib/tsc-program.mjs :22
import { execFileSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/pack-and-verify.mjs :53
import { spawn, spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/run-engine-smokes.mjs :23
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/sdk-watch.mjs :67
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/skill-eval.mjs :40
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/skill-eval.test.mjs :14
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/smoke-cli.mjs :43
import { spawn, spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/smoke-launcher.mjs :22
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/smoke-web-elicitation.mjs :54
import { spawn } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-build-gate.mjs :30
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-dep-lockstep.main.test.mjs :22
import { execFileSync, spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-format-coverage.main.test.mjs :13
import { execFileSync, spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-format-coverage.mjs :17
import { execFileSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-skills-cli.mjs :22
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-skills.main.test.mjs :14
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-skills.mjs :30
import { spawnSync } from "node:child_process"; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-typecheck-coverage.main.test.mjs :2
// cannot be resolved (on Windows the old `execFileSync("npx", …)` threw ENOENT; - shell (weak) modelcontextprotocol-inspector-2e90a62/scripts/verify-typecheck-coverage.mjs :40
import { execFileSync } from "node:child_process";
network 63
- net (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/cli.test.ts :27
import { createServer, request } from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/oauth-interactive.test.ts :43
let response = await fetch(authorizationUrl.toString(), { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/stored-auth.test.ts :3
import { createServer, type Server } from "node:http"; - net modelcontextprotocol-inspector-2e90a62/clients/web/server/app-origin-controller.ts :68
import { createServer, type Server } from "node:http"; - net modelcontextprotocol-inspector-2e90a62/clients/web/server/sandbox-controller.ts :6
import { createServer, type Server } from "node:http"; - net modelcontextprotocol-inspector-2e90a62/clients/web/server/server.ts :98
return apiApp.fetch(c.req.raw); - net modelcontextprotocol-inspector-2e90a62/clients/web/server/vite-hono-plugin.ts :10
import type { IncomingMessage, ServerResponse } from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/components/groups/ProtocolEntry/ProtocolEntry.test.tsx :735
it("does NOT modern-frame a -32601 with no correlated fetch (e.g. stdio)", () => { - net modelcontextprotocol-inspector-2e90a62/clients/web/src/hooks/useOAuthRecovery.ts :549
// Backend-backed session storage used to carry the fetch (Network) log - net modelcontextprotocol-inspector-2e90a62/clients/web/src/lib/environmentFactory.ts :48
const fetchFn: typeof fetch = (...args) => globalThis.fetch(...args); - net modelcontextprotocol-inspector-2e90a62/clients/web/src/lib/remoteOAuthStorage.ts :14
const defaultFetch: typeof fetch = (...args) => globalThis.fetch(...args); - net modelcontextprotocol-inspector-2e90a62/clients/web/src/lib/webProxiedFetch.ts :5
const defaultFetch: typeof fetch = (...args) => globalThis.fetch(...args);
show 28 more
- net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/mcp/remote/sessionStorage.test.ts :306
it("defaults to a wrapper around globalThis.fetch (not the bare reference)", async () => { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/mcp/state/managedToolsState.test.ts :210
it("debounces a burst of list_changed into a single indicator light, no fetch (#1444)", async () => { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/core/react/useServers.test.tsx :48
return app.fetch(req) as Promise<Response>; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/oauth-callback-server.test.ts :2
import { connect } from "node:net"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/oauth-stalled-endpoint.test.ts :197
const metadata = await fetch( - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/revocation-e2e.test.ts :97
await fetch(`${serverUrl}/.well-known/oauth-authorization-server`) - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/rfc8414AtOidcPath.test.ts :62
const oidc = await fetch(`${serverUrl}${OIDC_PATH}`); - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/helpers/oauth-client-fixtures.ts :156
let response = await fetch(authorizationUrl.toString(), { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/ema-mock-servers.ts :12
} from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-ema-e2e.test.ts :61
const res = await fetch(url); - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-malformed-list.test.ts :7
} from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-oauth-e2e.test.ts :1239
return fetch(input, init); - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-timeout-diagnostics.test.ts :7
} from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient-xmcpheader-mirroring.test.ts :66
return fetch(input, init); - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/inspectorClient.test.ts :4121
await fetch(url!, { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/listSalvage-era.test.ts :7
} from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/node/transport.test.ts :27
import { createServer, request, type Server } from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/oauth-cimd-fixture.test.ts :102
const res = await fetch( - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/oauth-resource-metadata-challenge.test.ts :14
import { createServer } from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/client-store-route.test.ts :116
const res = await fetch(`${h.baseUrl}/api/storage/client`, { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/connect-crash.test.ts :137
const connectRes = await fetch(`${h.baseUrl}/api/mcp/connect`, { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/remote-auth-branches.test.ts :14
import { createServer } from "node:http"; - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/server-extra-coverage.test.ts :204
return fetch(`${h.baseUrl}/api/log`, { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/servers-events.test.ts :13
* stream with `fetch().body.getReader()`. Each harness calls `closeApi()` - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/servers-order.test.ts :80
return fetch(`${baseUrl}/api/servers/order`, { - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/servers-route.test.ts :102
const res = await fetch(`${h.baseUrl}/api/import-source?type=bogus`); - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/sse-abort-cleanup.test.ts :8
* synchronously, then prime the stream so Firefox's `fetch()` resolves - net (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/mcp/remote/sse-priming.test.ts :5
* Firefox does not hand a streaming `fetch()` response to JS until the first
23 more not shown — this panel samples each group; the count above is the real total.
secrets 4
- secrets modelcontextprotocol-inspector-2e90a62/clients/cli/src/cli.ts :537
const apiToken = process.env.MCP_INSPECTOR_API_TOKEN || undefined; - secrets (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/secret-store-selection.test.ts :544
process.env.MCP_INSPECTOR_SECRET_KEY = "hunter2"; - secrets (weak) modelcontextprotocol-inspector-2e90a62/scripts/dependabot-alerts.mjs :763
token: process.env.PROJECT_TOKEN, - secrets (weak) modelcontextprotocol-inspector-2e90a62/scripts/dependabot-alerts.test.mjs :687
const saved = process.env.PROJECT_TOKEN;
install hooks 2
- prepack modelcontextprotocol-inspector-2e90a62/package.json :89
npm run build - postinstall modelcontextprotocol-inspector-2e90a62/package.json :90
node scripts/install-clients.mjs
declared dependencies 35
- @modelcontextprotocol/client@2.0.0
- @modelcontextprotocol/core@2.0.0
- @modelcontextprotocol/ext-apps@^2.0.0
- @modelcontextprotocol/server@2.0.0
- @modelcontextprotocol/server-legacy@2.0.0
- @hono/node-server@^2.0.12
- @napi-rs/keyring@^1.3.0
- @vitejs/plugin-react@^6.0.0
- ajv@^8.17.1
- atomically@^2.1.1
- chokidar@^4.0.3
- commander@^13.1.0
show 23 more
- hono@^4.13.7
- ink@^6.0.0
- open@^10.2.0
- pino@^9.14.0
- proper-lockfile@^4.1.2
- react@^19.0.0
- undici@^8.5.0
- vite@^8.1.5
- yaml@^2.9.0
- zod@^4.4.3
- @eslint/js@^10.0.1
- @types/node@^24.12.4
- @types/proper-lockfile@^4.1.4
- @vitest/coverage-v8@4.1.11
- eslint@^10.8.0
- eslint-plugin-react-hooks@^7.1.1
- express@^5.2.1
- globals@^17.7.0
- prettier@3.8.4
- semver@^7.8.5
- typescript@~5.9.3
- typescript-eslint@^8.65.0
- vitest@4.1.11
obfuscation 1
- dynamic require()/import() modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/auth/node/file-lock.test.ts :108
const lockfile = require(${JSON.stringify(LOCKFILE_MODULE)});
perm:untrusted 2
- untrusted (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/server/app-origin-controller.test.ts :281
await expect((await fetch(a.url)).text()).resolves.toBe("<p>a</p>"); - untrusted (weak) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/server/sandbox-controller.test.ts :279
const body = await (await fetch(url)).text();
transport_posture 4
- binds all interfaces (0.0.0.0) modelcontextprotocol-inspector-2e90a62/clients/cli/__tests__/stored-auth.test.ts :705
HOST: "0.0.0.0", - binds all interfaces (0.0.0.0) modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/server/app-origin-controller.test.ts :379
controller = createAppOriginController({ port: 0, host: "0.0.0.0" }); - network-listening, binds all interfaces, no auth detected modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/server/resolve-bind-host.test.ts :85
HOST: "0.0.0.0", - network-listening, binds all interfaces, no auth detected modelcontextprotocol-inspector-2e90a62/clients/web/src/test/integration/server/sandbox-controller.test.ts :355
const controller = createSandboxController({ port: 0, host: "0.0.0.0" });