Free MCP Tools
Browse all MCP Toolkit utilities for Model Context Protocol configuration, security analysis, JSON-RPC, tool schemas, permissions, secrets, transport and developer workflows.
MCP Config Validator
Validate MCP configuration JSON and inspect risky commands, URLs, secrets and transport settings.
SecurityMCP Permission Checker
Review filesystem, shell, credential, network and elevated-permission risks.
SecurityMCP Secret Scanner
Detect hard-coded API keys, tokens, passwords, private keys and credential patterns.
SecurityMCP Tool Risk Scanner
Analyze tool definitions and annotations for high-impact capabilities.
SecurityMCP Prompt Injection Checker
Scan MCP content for instruction overrides, exfiltration and safety-bypass patterns.
SecurityMCP SSRF Checker
Inspect URLs for localhost, private network, metadata service and related SSRF risks.
SecurityMCP Command Execution Checker
Find dangerous shell patterns, remote script execution, privilege escalation and unsafe flags.
ValidationMCP Schema Validator
Validate MCP tool input and output schema structures and common JSON Schema mistakes.
DeveloperMCP Security Checklist Generator
Generate a practical MCP security checklist based on your deployment profile.
ValidationMCP JSON-RPC Validator
Validate JSON-RPC requests, notifications, responses, IDs, params and errors.
DeveloperMCP Capabilities Inspector
Inspect tools, resources, prompts, logging and other advertised MCP capabilities.
ValidationMCP Transport Checker
Review stdio, remote HTTP, legacy SSE and transport configuration problems.
DeveloperMCP Server Config Generator
Generate local stdio or remote MCP server configuration.
DeveloperMCP Server Config Converter
Normalize common MCP server configuration formats.
ValidationMCP Tool Definition Validator
Validate tool names, schemas and annotations.
ValidationMCP Resource URI Validator
Check MCP resource URI structure.
ValidationMCP Resource Template Validator
Inspect MCP resource URI templates and variables.
ValidationMCP Prompt Template Validator
Validate MCP prompt names and arguments.
ProtocolMCP Server Discover Request Builder
Build MCP 2026-07-28 server/discover requests.
ProtocolMCP Server Discover Response Validator
Validate server/discover response structure.
ProtocolMCP Protocol Version Checker
Check current and older MCP protocol versions.
DeveloperMCP Error Code Explainer
Explain standard JSON-RPC error codes used by MCP.
ProtocolMCP Method Inspector
Inspect MCP methods, namespaces and routing metadata.
ProtocolMCP Request Response Matcher
Match JSON-RPC request and response IDs.
ValidationMCP Notification Validator
Validate MCP JSON-RPC notifications.
ValidationMCP Pagination Cursor Checker
Check pagination cursor and nextCursor values.
ProtocolMCP Cache Hint Validator
Validate ttlMs and cacheScope metadata.
ProtocolMCP HTTP Header Validator
Validate modern MCP routing headers.
ProtocolMCP Trace Context Validator
Check W3C tracing metadata used by MCP.
ProtocolMCP Input Required Validator
Validate input_required MRTR results.
ProtocolMCP Input Responses Validator
Validate inputResponses and requestState.
ProtocolMCP Stateless Request Checker
Check modern stateless MCP requests.
ExtensionsMCP Tasks Extension Validator
Validate Tasks extension capability declarations.
ExtensionsMCP Task State Validator
Validate MCP task lifecycle state objects.
ExtensionsMCP Extension Declaration Validator
Validate extension identifiers and settings.
MigrationMCP Deprecated Feature Checker
Find deprecated and legacy MCP features.
MigrationMCP 2025 to 2026 Migration Checker
Review old MCP configurations for 2026 migration.
ValidationMCP Tool Annotations Validator
Validate MCP tool behavior hints.
ValidationMCP Tool Name Checker
Review MCP tool identifiers for common issues.
ValidationMCP Schema Complexity Checker
Measure schema depth, size and composition.
SecurityMCP External $ref Scanner
Find external JSON Schema references without fetching them.
ValidationMCP Tool Result Validator
Validate CallToolResult and structured output.
AuthorizationMCP OAuth Metadata Validator
Validate OAuth authorization server metadata.
AuthorizationMCP Protected Resource Metadata Validator
Validate protected resource discovery metadata.
AuthorizationMCP Authorization Config Checker
Cross-check resource and authorization metadata.
AuthorizationMCP OAuth Issuer Validator
Detect OAuth issuer and credential mismatches.
AuthorizationMCP Client Metadata Validator
Validate Client ID Metadata Documents.
AuthorizationMCP Redirect URI Checker
Check OAuth redirect URI configuration.
ValidationMCP Resource Result Validator
Validate MCP resources/read result structures.
ValidationMCP Prompt Result Validator
Validate MCP prompts/get result structures.
What can you check with MCP Toolkit?
MCP Toolkit provides browser-based utilities for developers working with Model Context Protocol clients, servers and integrations. The current tools focus on static analysis so configuration and text can be reviewed without executing submitted commands or connecting to arbitrary remote servers.
Use the security tools to review permissions, secrets, prompt-injection indicators, SSRF exposure and command execution risks. Use validation tools for MCP configuration, JSON-RPC messages, schemas and transport settings. Developer utilities help inspect capabilities and create practical security checklists.