mcpward

mcpward is a developer tool focused on black-box security and contract testing of MCP servers. It snapshots server contracts and fails builds when unexpected changes occur, detecting issues such as schema drift, tool-poisoning patterns, protocol violations, and rug-pulls. The tool runs fully offline, integrates easily into CI workflows, and outputs results in multiple formats including console, JSON, JUnit, SARIF, and Markdown. It supports both stdio and HTTP MCP server transports and is language-agnostic.