github Python analyzed 2b278ff

narko4u/mcp-evidence-validator

github

Validate what an MCP server declares against what it actually does. Declared-vs-observed checks with a tamper-evident SHA-256 evidence ledger.

maintainer
narko4u
license
Apache-2.0
first seen
2026-08-14
last seen
2026-08-14
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4

filesystem 3

  • fs (weak) narko4u-mcp-evidence-validator-2b278ff/examples/make_examples.py :101 with open(os.path.join(HERE, "fictional-server-declared.json"), "w") as fh:
  • fs narko4u-mcp-evidence-validator-2b278ff/prototype/ledger.py :25 with open(path, "r", encoding="utf-8") as fh:
  • fs narko4u-mcp-evidence-validator-2b278ff/prototype/validate.py :20 with open(path, "r", encoding="utf-8") as fh: