Developer Releases mcp-linter Tool Exposing Security Flaws in Anthropic MCP Servers
A new open-source utility called mcp-linter was created to audit servers built on Anthropic's Model Context Protocol. The tool runs servers in isolated child processes, performs initialize handshakes, and checks 34 rules without executing any tools. Testing revealed multiple issues across official reference servers, including missing parameter descriptions and absent safety annotations. One server received a low score of 38 out of 100 due to 18 undocumented parameters that increase the risk of LLM hallucinations. The linter also supports automatic patch generation and SARIF output for GitHub Security integration. The project is published under the MIT license with plans to add support for remote transports such as SSE and WebSocket.
HabrOct 31, 2026Translated from Russian