Audit your MCP server in seconds

mcpscore is a deterministic MCP server auditor. Get a 0–100 view of protocol conformance, tool and schema quality, observable security and auth posture, and spec readiness — with actionable recommendations.

Run it where you work

Check a server locally, gate a pull request, or share the same report from the web.

See how the score is calculated in the MCP server audit methodology and inspect every check in the audit rules reference.

Deterministic — no LLM judging
No API key or sign-up
Never invokes your tools

From your terminal

MCP audit CLI guide

uvx mcpscore https://your-server.example/mcp

In every pull request

MCP audit GitHub Action guide

- uses: mcp-box/mcpscore-action@v1
  with:
    target: https://your-server.example/mcp
    min-score: 80

Report preview

74

Protocol95

Tools Quality90

Security & Auth42

Readiness67

What to fix first

Your server works, but it isn’t ready to ship. Fix the Security & Auth gaps first, then follow your prioritized MCP 2026-07-28 migration checklist—both generated from this audit.

What mcpscore checks

One repeatable view of server quality

The audit connects as a real MCP client, inspects protocol and catalog evidence, and applies deterministic rules across protocol, tools quality, security and auth, and readiness.

Every result links back to the public MCP audit methodology and complete rules reference.

Use the right tool

An audit is not every kind of test

mcpscore does not invoke your tools, inspect source code or dependencies, or certify that a server is vulnerability-free. Official conformance tests, MCP Inspector v2, and security scanners answer different questions and often belong beside it.

Compare MCP server testing tools