{"id":"956b20fa-c5cb-41ae-b0fc-2b63b81e8893","slug":"mcphints","kind":"mcp","name":"mcphints","summary":"Given an MCP server, shows the declared ToolAnnotations for security assessments","owner":"kaihendry","repoUrl":"https://github.com/kaihendry/mcphints","license":"MIT","licenseTier":"permissive","trust":"community","stars":3,"match":null,"fewStars":true,"format":"mcp","createdAt":"2026-07-19T19:49:51.000Z","addedAt":"2026-10-21T06:26:05.152Z","logoUrl":"https://avatars.githubusercontent.com/u/765871?u=3e8135bc649192e6ca2fc28fbe62b8d04a8cf29b&v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["cloud-infra","memory-knowledge"],"tags":["security-tools"],"runtime":"go","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-26T01:47:10.726Z","sample":false,"url":"https://conduits.dev/tools/mcphints","language":"Go","transports":["stdio"],"install":{},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# MCP hints\n\nInspect an MCP server's tools, descriptions, parameters, and\n[annotation hints](https://modelcontextprotocol.io/specification/2026-07-28/schema#toolannotations).\nSort by name or hint to help review what the server claims. Hints are\nself-declared, not enforced controls; missing hints use conservative defaults.\n\n[![Demo](https://s.natalian.org/2026-07-20/mcphintthumb.png)](https://youtu.be/SvhuBZY4Fu0)\n\n## Run\n\n```sh\ngo run .\n```\n\nOpen http://localhost:8321 and enter an MCP server URL or stdio command,\nor paste `tools/list` JSON.\n\nFetching from a server requires Node.js (`npx`). The MCP Inspector handles\nOAuth and opens your browser when authorization is needed. If a server fails\nwith \"Issuer mismatch\" (its OAuth metadata breaks RFC 8414 §3.3), tick **Skip\nOAuth issuer check** to correct it client-side and report it to the vendor.\n\n**Publish this report** shares the results as an unlisted GitHub gist using\nan authenticated `gh` CLI. Anyone with the gist URL can read it.\n\n## License\n\n[MIT](LICENSE).\n"}