mcp-debug
Enables real-time testing and debugging of MCP servers, facilitating exploration and diagnosis of tool responses and capabilities.
Install this skill
Security score
The mcp-debug skill was audited on Mar 3, 2026 and we found 25 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 145 | curl -s http://localhost:9900/health |
Curl to non-GitHub URL
| 167 | - Check if server is running: `curl http://localhost:9900/health` |
Curl to non-GitHub URL
| 202 | curl -s http://localhost:9900/health |
Access to hidden dotfiles in home directory
| 51 | 1. **Claude Code config**: `~/.config/claude/claude_desktop_config.json` |
External URL reference
| 52 | 2. **Direct URL**: `http://localhost:9900` with optional auth |
External URL reference
| 75 | mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 81 | mcp tools --format pretty http://localhost:9900 |
External URL reference
| 90 | mcp call describe --params '{"action":"describe"}' http://localhost:9900 \ |
External URL reference
| 95 | http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 98 | mcp call tool_name --params '{}' --format pretty http://localhost:9900 |
External URL reference
| 106 | mcp shell http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 118 | mcp web http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 119 | # Opens http://localhost:41999 |
External URL reference
| 133 | mcp call server-tool --params '{"action":"describe"}' http://localhost:9900 \ |
External URL reference
| 138 | http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 145 | curl -s http://localhost:9900/health |
External URL reference
| 148 | mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 152 | http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 156 | --format pretty http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 167 | - Check if server is running: `curl http://localhost:9900/health` |
External URL reference
| 202 | curl -s http://localhost:9900/health |
External URL reference
| 208 | mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 215 | http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 222 | --format pretty http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN" |
External URL reference
| 253 | mcp call server-tool --params '...' --format json http://localhost:9900 \ |