mcp-evals
GitHub Action for evaluating MCP server tool calls using LLM-based scoring
Not Scanned
Security Score?
Vulnerabilities Found
Quality Score?
Maintenance0
Popularity0
Documentation0
Available Documentation
Compatibility0
Features
Agentic MCP Risk Intelligence
MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.
The current scan did not find prompt-injection, agent command, exfiltration, unbounded filesystem, or MCP SSRF patterns.
Tool metadata can steer or hijack AI clients before a user invokes the tool.
Model-selected tool arguments can reach shell/process execution.
Tool context combines credential access with outbound network capability.
AI-controlled paths may access files outside the intended workspace.
AI-controlled URLs may reach local, metadata, or internal network services.
Vulnerabilities(2)
README
No README available for this server.
View repositoryEmbed Security Badge
Add this badge to your README or documentation
[](https://mcpsafe.org/registry/mcp-evals)Server Information
- Source
- NPM
- Package
- mcp-evals
- Version
- 2.0.1
- Language
- typescript
- License
- MIT
- Added
- Jun 28, 2026
- Updated
- Jun 28, 2026