Conformance
Conformance86 checkspassive → adversarial
Does the server follow the specs it claims to? MCP, OAuth, JSON-RPC, HTTP, TLS — all the contracts a stable building block depends on.
Every check declares the minimum intensity at which it runs and the worst severity a finding can carry. Expand one for what it does, what it depends on, and a reproduction you can run against a server you own. Counts are live, from library 0.29.0.
http
4 checks
manifest
3 checks
mcp
55 checks
oauth
3 checks
output
2 checks
schema
12 checks
tasks
2 checks
transport
5 checks