Skip to main content

mcp-debug

Enables real-time testing and debugging of MCP servers, facilitating exploration and diagnosis of tool responses and capabilities.

Install this skill

or
49/100

Security score

The mcp-debug skill was audited on Mar 3, 2026 and we found 25 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 145

Curl to non-GitHub URL

SourceSKILL.md
145curl -s http://localhost:9900/health
high line 167

Curl to non-GitHub URL

SourceSKILL.md
167- Check if server is running: `curl http://localhost:9900/health`
medium line 202

Curl to non-GitHub URL

SourceSKILL.md
202curl -s http://localhost:9900/health
medium line 51

Access to hidden dotfiles in home directory

SourceSKILL.md
511. **Claude Code config**: `~/.config/claude/claude_desktop_config.json`
low line 52

External URL reference

SourceSKILL.md
522. **Direct URL**: `http://localhost:9900` with optional auth
low line 75

External URL reference

SourceSKILL.md
75mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 81

External URL reference

SourceSKILL.md
81mcp tools --format pretty http://localhost:9900
low line 90

External URL reference

SourceSKILL.md
90mcp call describe --params '{"action":"describe"}' http://localhost:9900 \
low line 95

External URL reference

SourceSKILL.md
95http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 98

External URL reference

SourceSKILL.md
98mcp call tool_name --params '{}' --format pretty http://localhost:9900
low line 106

External URL reference

SourceSKILL.md
106mcp shell http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 118

External URL reference

SourceSKILL.md
118mcp web http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 119

External URL reference

SourceSKILL.md
119# Opens http://localhost:41999
low line 133

External URL reference

SourceSKILL.md
133mcp call server-tool --params '{"action":"describe"}' http://localhost:9900 \
low line 138

External URL reference

SourceSKILL.md
138http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 145

External URL reference

SourceSKILL.md
145curl -s http://localhost:9900/health
low line 148

External URL reference

SourceSKILL.md
148mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 152

External URL reference

SourceSKILL.md
152http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 156

External URL reference

SourceSKILL.md
156--format pretty http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 167

External URL reference

SourceSKILL.md
167- Check if server is running: `curl http://localhost:9900/health`
low line 202

External URL reference

SourceSKILL.md
202curl -s http://localhost:9900/health
low line 208

External URL reference

SourceSKILL.md
208mcp tools http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 215

External URL reference

SourceSKILL.md
215http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 222

External URL reference

SourceSKILL.md
222--format pretty http://localhost:9900 --headers "Authorization=Bearer $AUTH_TOKEN"
low line 253

External URL reference

SourceSKILL.md
253mcp call server-tool --params '...' --format json http://localhost:9900 \
Scanned on Mar 3, 2026
View Security Dashboard
Installation guide →