jjevsikov/CheckSpec
Test your MCP server for protocol conformance, schema fuzzing, and security vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| server-command | Command to start the MCP server (for stdio transport). Required if collection is not set. | no | — |
| collection | Path to a .checkspec.json collection file. Required if server-command is not set. | no | — |
| working-directory | Working directory to run the server from (useful for Python uv projects) | no | "" |
| fuzz | Enable full fuzz testing (all 19 edge cases + invalid/random inputs) | no | false |
| output | Output format: console, json, or junit | no | console |
| fail-on-security | Fail the action if any security findings are detected at HIGH or above | no | true |
Outputs
| name | description |
|---|---|
| result | Test result: "passed" or "failed" |
| total-tests | Total number of tests run |
| failed-tests | Number of failed tests |
| security-findings | Number of security findings detected |