github not analyzable

modelcontextprotocol/inspector

github
maintainer
modelcontextprotocol
license
first seen
2026-05-22
last seen
2026-06-17
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · streamable-http · http · sse counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed analyzer v18 · 10h ago

skills & prompt files 2

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

last analysis: fetch-failed · showing evidence from the last successful analysis (3d ago)

filesystem 6

  • fs modelcontextprotocol-inspector-638f2bf/cli/scripts/make-executable.js :4 import { promises as fs } from "fs";
  • fs modelcontextprotocol-inspector-638f2bf/cli/src/cli.ts :4 import fs from "node:fs";
  • fs modelcontextprotocol-inspector-638f2bf/cli/src/index.ts :3 import * as fs from "fs";
  • fs modelcontextprotocol-inspector-638f2bf/scripts/check-version-consistency.js :3 import fs from "fs";
  • fs modelcontextprotocol-inspector-638f2bf/scripts/update-version.js :3 import fs from "fs";
  • fs modelcontextprotocol-inspector-638f2bf/server/src/index.ts :34 import { readFileSync } from "fs";

shell / exec 3

  • shell modelcontextprotocol-inspector-638f2bf/cli/scripts/make-executable.js :6 import { execSync } from "child_process";
  • shell modelcontextprotocol-inspector-638f2bf/client/bin/start.js :66 const server = spawn(serverCommand, serverArgs, spawnOptions);
  • shell modelcontextprotocol-inspector-638f2bf/scripts/update-version.js :5 import { execSync } from "child_process";

network 5

  • net modelcontextprotocol-inspector-638f2bf/client/bin/client.js :7 import http from "http";
  • net modelcontextprotocol-inspector-638f2bf/client/src/App.tsx :724 fetch(`${getMCPProxyAddress(config)}/config`, { headers })
  • net modelcontextprotocol-inspector-638f2bf/client/src/lib/hooks/useConnection.ts :372 const proxyHealthResponse = await fetch(proxyHealthUrl, { headers });
  • net modelcontextprotocol-inspector-638f2bf/client/src/lib/proxyFetch.ts :115 const proxyResponse = await fetch(`${proxyAddress}/fetch`, {
  • net modelcontextprotocol-inspector-638f2bf/server/src/index.ts :6 import nodeFetch, { Headers as NodeHeaders } from "node-fetch";

secrets 2

  • secrets modelcontextprotocol-inspector-638f2bf/client/bin/start.js :289 process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");
  • secrets modelcontextprotocol-inspector-638f2bf/server/src/index.ts :227 process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");

declared dependencies 22

  • @modelcontextprotocol/inspector-cli@^0.22.0
  • @modelcontextprotocol/inspector-client@^0.22.0
  • @modelcontextprotocol/inspector-server@^0.22.0
  • @modelcontextprotocol/sdk@^1.25.2
  • concurrently@^9.2.0
  • node-fetch@^3.3.2
  • open@^10.2.0
  • shell-quote@^1.8.3
  • spawn-rx@^5.1.2
  • ts-node@^10.9.2
  • zod@^3.25.76
  • @playwright/test@^1.54.1
  • @types/jest@^29.5.14
  • @types/node@^22.17.0
  • @types/shell-quote@^1.7.5
  • husky@^9.1.7
  • jest-fixed-jsdom@^0.0.9
  • lint-staged@^16.1.5
  • playwright@^1.56.1
  • prettier@^3.7.1
  • rimraf@^6.0.1
  • typescript@^5.4.2