mcp server

mcphints

Given an MCP server, shows the declared ToolAnnotations for security assessments

kaihendry/mcphintscommunitylistedunreviewed

Use tool

Set up

Runs on your computer. Pick your agent and operating system.

This project does not publish an install method we can turn into a config. Follow the README instead.

README

synced Oct 26, 2026

MCP hints

Inspect an MCP server's tools, descriptions, parameters, and annotation hints. Sort by name or hint to help review what the server claims. Hints are self-declared, not enforced controls; missing hints use conservative defaults.

Run

go run .

Open http://localhost:8321 and enter an MCP server URL or stdio command, or paste tools/list JSON.

Fetching from a server requires Node.js (npx). The MCP Inspector handles OAuth and opens your browser when authorization is needed. If a server fails with "Issuer mismatch" (its OAuth metadata breaks RFC 8414 §3.3), tick Skip OAuth issuer check to correct it client-side and report it to the vendor.

Publish this report shares the results as an unlisted GitHub gist using an authenticated gh CLI. Anyone with the gist URL can read it.

License

MIT.