Validate Model Context Protocol configurations, find risky MCP settings and inspect integrations before connecting AI applications to tools, files, APIs and services.
Validate MCP JSON and scan commands, URLs, secrets and risky configuration.
Inspect remote MCP server exposure, transport and security posture.
Review filesystem, command, network and credential permissions.
Live toolAnalyze tool definitions and identify high-impact capabilities.
Live toolDetect API keys, tokens and private credentials in MCP configuration.
Validate MCP tool input and output schemas and JSON Schema structures.
Scan MCP content for instruction override, exfiltration and safety-bypass patterns.
Live toolDetect localhost, metadata service and private-network URL risks.
Live toolFind dangerous shells, remote script pipes, privilege escalation and unsafe flags.
Live toolValidate MCP tool input/output schemas and common JSON Schema structures.
Live toolGenerate a security checklist for your MCP deployment profile.
Live toolValidate requests, notifications, responses and error objects.
Live toolInspect tools, resources, prompts and other advertised capabilities.
Live toolReview stdio, remote HTTP and legacy transport configuration.
Permissions, secrets, tool risks, prompt injection, SSRF and command execution.
4 toolsConfiguration, JSON-RPC, schemas and transport validation.
2 toolsCapabilities inspection and security checklist generation.
Live toolCreate local or remote MCP server configuration.
Live toolValidate MCP tool names, schemas and annotations.
Live toolBuild MCP 2026-07-28 server/discover requests.
Live toolCheck current and previous MCP protocol versions.
MCP Toolkit is a collection of free utilities for developers building or reviewing Model Context Protocol servers, clients and integrations.
The tools focus on configuration quality, security, permissions, schemas, transport behavior and common developer workflows.
MCP integrations can launch local processes or connect AI applications to remote services. Reviewing the configuration before execution helps identify obvious credential exposure, command risks and unsafe endpoints.