[mcp-inspector] 🔍 MCP Inspector Report - 2026-07-13

[github-actions[bot]]

Summary

• Servers Inspected: 28
• By Type: Container: 14, HTTP: 8 (url-based), Local/CLI: 4, Safe-job only: 2
• With Secrets: 9 servers require secrets
• Without MCP server block (CLI/safe-job only): 3 (sentrux, serena-go, slack)

Inventory Table

Server	Type	Tools	Secrets	Status
agentdb	local	*	—	✅
arxiv	container	search_arxiv, get_paper_details, get_paper_pdf	—	✅
ast-grep	container	*	—	✅
azure	container	subscription_list, group_list, +more	AZURE_TENANT_ID, CLIENT_ID, CLIENT_SECRET	✅
brave-search	container	*	BRAVE_API_KEY	✅
context7	container	query-docs, resolve-library-id	CONTEXT7_API_KEY	✅
datadog	http	search_datadog_spans, get_datadog_trace, +more	DD_API_KEY, DD_APPLICATION_KEY	✅
deepwiki	http	read_wiki_structure, read_wiki_contents, ask_question	—	✅
fabric-rti	local	kusto_query, kusto_list_databases, +more	AZURE_TENANT_ID, CLIENT_ID, CLIENT_SECRET	✅
grafana	container	list_datasources, tempo_traceql-search, +more	GRAFANA_URL, GRAFANA_SERVICE_ACCOUNT_TOKEN	✅
headroom	container	headroom_compress, headroom_retrieve, headroom_stats	—	✅
jupyter	http	execute_cell, get_cell_output, create_notebook	—	✅
kreuzberg	container	(not listed)	—	✅
markitdown	container	*	—	⚠️ wildcard tools
mempalace	http	mempalace_status, mempalace_list_wings, +more	—	✅
microsoft-docs	http	*	—	✅
notion	container	search_pages, get_page, get_database, +more	NOTION_API_TOKEN	✅
ruflo	local	memory_search, memory_store, swarm_init	—	✅
semgrep	container	semgrep_rule_schema, semgrep_scan, +more	—	✅
sentrux	CLI only	CLI: sentrux check/gate/version	—	⚠️ no MCP block
sentry	local	whoami, find_organizations, find_teams, +more	SENTRY_ACCESS_TOKEN, SENTRY_OPENAI_API_KEY	✅
serena-go	import	(delegates to serena.md)	—	i️ wrapper
serena	container	(LSP-based, unlisted)	—	✅
server-memory	container	store_memory, retrieve_memory, list_memories	—	✅
skillz	container	*	—	✅
slack	safe-job	post_to_slack_channel	SLACK_BOT_TOKEN	⚠️ safe-job only
svelte	http	list-sections, get-documentation, svelte-autofixer	—	✅
tavily	http	*	TAVILY_API_KEY	✅

Details

Servers with wildcard tool allowlists (*)

agentdb, ast-grep, brave-search, markitdown, microsoft-docs, skillz, tavily

⚠️ markitdown has a comment acknowledging the wildcard as a security decision (2026-05-19), documented in the file.

Special configurations

sentrux — No MCP server block; installs a binary CLI via setup step. Uses stdio MCP transport (not supported by MCP Gateway). Use via bash CLI only.

serena-go — Wrapper that imports serena.md with languages: ["go"]. Not an independent server.

slack — Implemented as a safe-outputs safe-job, not an MCP server. Posts messages via Slack Bot Token.

fabric-rti — Local npx-based server requiring three Azure credentials; high privilege surface.

azure — Container server with Azure credential triple; broad subscription/resource group access.

Recommendations

1. Review wildcard allowlists on markitdown, ast-grep, skillz — consider listing explicit tools where possible.
2. kreuzberg tools not documented — add an allowed: list or inline docs for discoverability.
3. serena tools not listed — document expected LSP tool names in the file for clarity.
4. context7 CONTEXT7_API_KEY — verify this secret is available in all repositories that import this config.
5. fabric-rti + azure share the same Azure triple-secret — consider consolidating documentation.

Generated by 🔍 MCP Inspector Agent · 41.5 AIC · ⌖ 4.99 AIC · ⊞ 6K · ◷

• expires on Jul 14, 2026, 11:12 AM UTC-08:00

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-07-14T19:12:14.108Z.

Closed by Workflow