QAmcp

QAmcp is a command-line tool and GitHub Action that tests Model Context Protocol (MCP) servers for various correctness and security issues, including tools, safety labels, hidden instructions, bad inputs, leaked secrets, OAuth login setup, resources, and prompts. It provides factual pass/fail results without AI judgment and operates entirely by communicating only with the tested server, with no data sent externally.