A collection of MCP test servers including working servers (ping, resource, combined, env-echo) and test failure cases (broken-tool, crash-on-startup)
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http · sse counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v1.1.72 · analyzer v18 · 9h ago
skills & prompt files 3
danger signals1
- credential in logscredential in logmsfeldstein-mcp-test-servers-6865b0e/src/oauth-token-refresh-server.js:231
console.error(`✅ Token refreshed: new access token expires in ${ACCESS_TOKEN_EXPIRY_SECONDS}s`);
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 4
- fs msfeldstein-mcp-test-servers-6865b0e/scripts/add-server.js :3
import { readFileSync, writeFileSync } from 'fs'; - fs msfeldstein-mcp-test-servers-6865b0e/scripts/oauth-debug-setup.js :4
import { readFileSync } from 'fs'; - fs msfeldstein-mcp-test-servers-6865b0e/src/cli.js :3
import { readFileSync } from 'fs'; - fs msfeldstein-mcp-test-servers-6865b0e/src/file-ops-server.js :5
import fs from 'fs/promises';
shell / exec 2
- shell msfeldstein-mcp-test-servers-6865b0e/scripts/oauth-debug-setup.js :3
import { spawn } from 'child_process'; - shell msfeldstein-mcp-test-servers-6865b0e/src/shell-exec-server.js :5
import { exec, spawn } from 'child_process';
network 1
- net msfeldstein-mcp-test-servers-6865b0e/src/oauth-repro-server.js :417
const response = await fetch(`${AUTH_SERVER_URL}/oauth/userinfo`, {
secrets 2
- secrets msfeldstein-mcp-test-servers-6865b0e/src/long-description-server.js :7
const descriptionTokens = process.env.DESCRIPTION_TOKENS; - secrets msfeldstein-mcp-test-servers-6865b0e/src/oauth-token-refresh-server.js :14
const ACCESS_TOKEN_EXPIRY_SECONDS = parseInt(process.env.ACCESS_TOKEN_EXPIRY_SECONDS || "30", 10);
tool registrations 65
- get-headers msfeldstein-mcp-test-servers-6865b0e/src/auth-headers-server.js :31
- ping msfeldstein-mcp-test-servers-6865b0e/src/auth-headers-server.js :45
- generate_big_response msfeldstein-mcp-test-servers-6865b0e/src/big-response-server.js :51
- crash msfeldstein-mcp-test-servers-6865b0e/src/broken-tool-server.js :18
- ping msfeldstein-mcp-test-servers-6865b0e/src/combined-server.js :47
- fizzbuzz msfeldstein-mcp-test-servers-6865b0e/src/combined-server.js :63
- analyze_text msfeldstein-mcp-test-servers-6865b0e/src/dual-content-server.js :104
- format_data msfeldstein-mcp-test-servers-6865b0e/src/dual-content-server.js :151
- optionalTool msfeldstein-mcp-test-servers-6865b0e/src/dynamic-tools-server.js :28
- toggleTool msfeldstein-mcp-test-servers-6865b0e/src/dynamic-tools-server.js :42
- status msfeldstein-mcp-test-servers-6865b0e/src/env-check-server.js :23
- env_echo msfeldstein-mcp-test-servers-6865b0e/src/env-echo-server.js :18
- echo_with_params msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :27
- simple_ping msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :48
- get_mixed_resources msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :58
- test_all_elicitations msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :79
- dynamic_feature msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :199
- toggle_dynamic_tool msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :214
- echo_mcp_roots msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :237
- echo_env_var msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :257
- long_running_progress msfeldstein-mcp-test-servers-6865b0e/src/everything-server.js :268
- execute-sql msfeldstein-mcp-test-servers-6865b0e/src/gpt5-breaker-server.js :42
- ping msfeldstein-mcp-test-servers-6865b0e/src/http-ping-server-improved.js :34
- ping msfeldstein-mcp-test-servers-6865b0e/src/http-ping-server.js :31
- generate_image msfeldstein-mcp-test-servers-6865b0e/src/image-server.js :15
- makeRequest msfeldstein-mcp-test-servers-6865b0e/src/instructions-server.js :36
- test-simple-integer msfeldstein-mcp-test-servers-6865b0e/src/integer-anyof-bug-server.js :69
- test-anyof-integer msfeldstein-mcp-test-servers-6865b0e/src/integer-anyof-bug-server.js :81
- test-both-params msfeldstein-mcp-test-servers-6865b0e/src/integer-anyof-bug-server.js :93
- get-info msfeldstein-mcp-test-servers-6865b0e/src/long-description-server.js :41
- tool_${i} msfeldstein-mcp-test-servers-6865b0e/src/many-tools-server.js :34
- add msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :110
- subtract msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :124
- multiply msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :138
- divide msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :152
- power msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :174
- sqrt msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :188
- factorial msfeldstein-mcp-test-servers-6865b0e/src/math-server.js :215
- missing-type-tool msfeldstein-mcp-test-servers-6865b0e/src/missing-type-server.js :51
- another-missing-type msfeldstein-mcp-test-servers-6865b0e/src/missing-type-server.js :60
- number-param msfeldstein-mcp-test-servers-6865b0e/src/number-param-server.js :33
- bug-status msfeldstein-mcp-test-servers-6865b0e/src/oauth-bug-trigger-server.js :366
- debug-oauth msfeldstein-mcp-test-servers-6865b0e/src/oauth-debug-server.js :465
- test-edge-cases msfeldstein-mcp-test-servers-6865b0e/src/oauth-edge-case-server.js :421
- whoami msfeldstein-mcp-test-servers-6865b0e/src/oauth-repro-server.js :390
- token-info msfeldstein-mcp-test-servers-6865b0e/src/oauth-token-refresh-server.js :407
- ping msfeldstein-mcp-test-servers-6865b0e/src/oauth-token-refresh-server.js :443
- echo msfeldstein-mcp-test-servers-6865b0e/src/optional-param-server.js :32
- parse_bugsnag_error_url msfeldstein-mcp-test-servers-6865b0e/src/pattern-param-server.js :42
- ping msfeldstein-mcp-test-servers-6865b0e/src/ping-server.js :22
- long-running-ping msfeldstein-mcp-test-servers-6865b0e/src/ping-server.js :32
- echo msfeldstein-mcp-test-servers-6865b0e/src/ping-server.js :50
- get-resource-list msfeldstein-mcp-test-servers-6865b0e/src/resource-lister-server.js :67
- root-echo msfeldstein-mcp-test-servers-6865b0e/src/root-echo-server.js :28
- ping msfeldstein-mcp-test-servers-6865b0e/src/session-inactivity-server.js :36
- echo msfeldstein-mcp-test-servers-6865b0e/src/session-inactivity-server.js :65
- get-session-info msfeldstein-mcp-test-servers-6865b0e/src/session-inactivity-server.js :96
- ping msfeldstein-mcp-test-servers-6865b0e/src/session-management-server.js :51
- terminate-session msfeldstein-mcp-test-servers-6865b0e/src/session-management-server.js :61
- ping msfeldstein-mcp-test-servers-6865b0e/src/sse-timeout-server.js :43
- echo msfeldstein-mcp-test-servers-6865b0e/src/sse-timeout-server.js :52
- log-to-stderr msfeldstein-mcp-test-servers-6865b0e/src/stderr-server.js :27
- ping msfeldstein-mcp-test-servers-6865b0e/src/stdout-server.js :32
- echo_structured msfeldstein-mcp-test-servers-6865b0e/src/structured-output-server.js :47
- get-time msfeldstein-mcp-test-servers-6865b0e/src/ui-server.js :241
declared dependencies 5
- @modelcontextprotocol/ext-apps@^1.0.1
- @modelcontextprotocol/sdk@^1.17.0
- cors@^2.8.5
- express@^4.21.2
- zod@^3.25.76
cursor-plugin 1
- opaque (low) msfeldstein-mcp-test-servers-6865b0e/.cursor/rules/.gitignore
bundled .cursor/ plugin descriptor (msfeldstein-mcp-test-servers-6865b0e/.cursor/rules/.gitignore) — presence-detected; review the descriptor