ResiliReplay MCP server
io.github.aliengineering-byte/resilireplay·v0.7.1·2 starsRun bounded, deterministic MCP reliability tests and generate executable regressions.
2 stars39 downloads/wk
Reviews
Write oneNobody has reviewed ResiliReplay yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
ResiliReplay tools (10, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
resilireplay_capture_startExplicitly arm bounded, sanitized, project-local passive capture.
resilireplay_capture_stopStop passive capture without deleting evidence.
resilireplay_generate_regressionwrite actionWrite an executable regression only when the caller confirms the exact evidence hash.
resilireplay_inspect_configReturn a sanitized, value-free execution plan for one project-local MCP server.
resilireplay_last_failureReturn the last bounded, sanitized supported failure evidence.
resilireplay_list_faultsList deterministic fault types without executing a target.
resilireplay_run_campaignwrite actionRun only a campaign whose exact reviewed hash is supplied; target calls retain campaign allowlists.
resilireplay_statusReport the local version and passive capture state.
resilireplay_validate_campaignValidate a project-local campaign and return its confirmation hash without running it.
resilireplay_verify_evidenceFail closed unless project-local campaign or MCP demo evidence has a valid schema and integrity hash.
Public scan report
scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 15 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/resilireplay.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
How ResiliReplay compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,243 servers
- Tools
- 10
- the typical server has 7
- Tools that change things
- 20%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 75% of 28,706 servers
- Downloads a week
- 39
- more than 29% of 12,306 servers with a package
What its tools let an agent do: 8 read · 2 change
Install ResiliReplay in Claude Code, Cursor or VS Code
Runs npx -y resilireplay on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add resilireplay -- npx -y resilireplay
What the publisher says
From the ResiliReplay repository's README, as published. We do not edit it. Read it on GitHub
ResiliReplay
Break an MCP server on purpose. Replay the failure. Ship the regression.
ResiliReplay is the MCP reliability engine behind proof-carrying recovery changes: inspect one reviewed target, inject a deterministic fault, bound retries and duplicate effects, preserve evidence, and turn the failure into an executable regression.
npx --yes resilireplay@0.7.1 mcp demoResiliReplay MCP demo
✓ Clean MCP tool call
✓ Deterministic failure reproduced
✓ Recovery bounded to one retry
✓ Duplicate effects observed: 0
✓ Regression generated
✓ Regression executed
MCP reliability check passed.
Evidence: sha256:4d2479b98453732d6011c699c061d023353c8d5cf4159bdf6c5b096961f94c06The demo is local, deterministic, credential-free, and cleaned up after it runs. It needs Node.js 22 or 24—no repository checkout, configuration, account, API key, paid model, or remote MCP server. This quickstart pins the released 0.7.1 artifact for reproducibility. Later @latest examples are convenient for following current documentation; pin an exact version in CI and retained evidence.
Product site · npm package · real MCP CI example · machine-readable capabilities
Ten-second before and after
What it does
- Inject deterministic MCP failures.
- Verify bounded recovery and duplicate-effect behavior.
- Generate executable regressions for CI.
Try your MCP server
Start with an Inspector-compatible mcp.json. A dry-run reads and sanitizes the selected entry but starts no process, opens no socket, calls no tool, and writes nothing.
npx --yes resilireplay@latest mcp test --config ./mcp.json --server my-server --tool echo --safety inert --dry-runReview the selected server, transport, tool, fault, retry/time bounds, and plan SHA-256. Execution requires that exact digest:
npx --yes resilireplay@latest mcp test --config ./mcp.json --server my-server --tool echo --safety inert --approve <plan-sha256>Use the same approved plan in CI and request concise machine-readable evidence:
npx --yes resilireplay@latest mcp test --config ./mcp.json --server my-server --tool echo --safety inert --approve <plan-sha256> --jsonmcp test connects with the MCP SDK, discovers only the reviewed operation, runs a clean call, injects one declared result-boundary fault, applies the bounded retry, counts duplicate effects, generates a causal regression, executes it, and closes owned resources. mcp audit remains available with its existing options for compatibility.
CI
The repository contains a complete packed-package example using the official MCP Everything reference server:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
ResiliReplay: common questions
- Is ResiliReplay MCP server safe?
- Mostly: it is graded B (82/100). Read the ResiliReplay safety report
- How do I install ResiliReplay?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does ResiliReplay need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is ResiliReplay maintained?
- The last commit was 35 days ago (2026-10-01). The latest release is v0.7.1.
- What can I use instead of ResiliReplay?
- Servers from other publishers that do the same job: Keploy MCP server.
- How does ResiliReplay compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,243 servers); tools 10 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to ResiliReplay
Same job from other publishers: the closest match first, then the best rated.
- KeployEnd-to-end API testing — generate and run tests from OpenAPI, curl, Postman, or real user traffic.not reviewedEstablishedA