mcp-observatory — Claude Code MCP server: what it does & setup
Tests MCP servers for security vulnerabilities, simulates attacks, and detects schema drift in CI or local workflows before agent integration.
claude mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatoryWhat mcp-observatory does
The tool inspects MCP server setups, checks tool definitions against schema drift, and outputs findings into HTML, JSON, or SARIF files. It can run automated checks inside GitHub Actions workflows or handle queries directly when started with the serve command.
A dedicated protect command updates client configuration files in Cursor, Claude, and VS Code to enforce default-deny rules. Remote HTTP and SSE endpoints remain untouched during this process. For active filtering during runtime, it connects with mcp-seatbelt to block unsafe tool executions through a proxy.
Node.js 20 or newer is mandatory for running the CLI through npx. Without Node.js 20+, execution stops immediately. Telemetry stays completely disabled by default and makes no remote calls without explicit confirmation.
What it helps with
- scan MCP server tools for flaws before agent deployment
- detect schema changes and simulate malicious tool calls
- generate SARIF vulnerability reports for GitHub Actions
- run a private local dashboard with audit logs
Example prompts for the agent
- Run a security audit on my local MCP server and show any detected vulnerabilities.
- Generate a GitHub Actions workflow with SARIF reporting for this MCP server.
- Check my MCP client configurations and apply default-deny protection rules.
How to install mcp-observatory
Platform CLI
claude mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatoryPlatform CLI
codex mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatoryConfig file
{
"mcpServers": {
"mcp-observatory": {
"command": "npx",
"args": [
"-y",
"@kryptosai/mcp-observatory"
]
}
}
}Config file
{
"servers": {
"mcp-observatory": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@kryptosai/mcp-observatory"
]
}
}
}Platform CLI
gemini mcp add mcp-observatory npx -y @kryptosai/mcp-observatoryStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp-observatory
How do I install mcp-observatory in Claude Code?
Add it by running claude mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatory in your terminal.
What does mcp-observatory do?
It audits MCP servers, tests tool attack vectors, tracks schema changes, and generates compliance records in SARIF or HTML.
What are the system requirements?
You need Node.js 20 or higher alongside npm. The scanner runs on macOS, Linux, and Windows.
