MCP.Market

Testlink MCP server

by Eason0in·io.github.Eason0in/testlink-mcp·v1.0.8

AI-friendly, safety-first TestLink MCP server

B78/100grade B
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars64 downloads/wk

Reviews

Write one

Nobody has reviewed Testlink yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Testlink tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan33 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 62 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Testlink compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 48,243 servers
Downloads a week
64
more than 50% of 12,306 servers with a package

Install Testlink in Claude Code, Cursor or VS Code

Runs npx -y testlink-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add testlink-mcp -- npx -y testlink-mcp
Add to Cursor

What the publisher says

From the Testlink repository's README, as published. We do not edit it. Read it on GitHub

testlink-mcp

An AI-friendly, safety-first Model Context Protocol server for TestLink 1.9.20. It exposes normalized discovery and analysis tools, bounded cursor pagination, structured output, and preview-before-apply writes over stdio.

This repository is a clean implementation based on TestLink's public XML-RPC interface and the public MCP SDK. It has no dependency on a private TestLink package or private source tree.

Highlights

  • Starts without credentials so MCP clients can discover all tools, resources, and prompts.
  • Explicit deterministic demo mode for evaluation and onboarding.
  • structuredContent, outputSchema, tool annotations, cursor pagination, and stable error codes.
  • Attachment metadata only; attachment content and base64 payloads are removed.
  • Writes disabled by default. There is no delete tool.
  • Every apply requires confirm: true, an unexpired single-use 10-minute preview, and an unchanged server snapshot.
  • Side-effect calls are never automatically retried; apply attempts are written to a redacted operation ledger.
  • Runtime guard blocks unsupported/EOL odd Node releases and security patch levels below the declared floor.

Safe write demo

The demo uses synthetic data only. It shows the required safety boundary: Preview a proposed change, inspect the bounded diff, then call apply with the exact preview ID and confirm: true. No write happens during preview. The editable source frames are in docs/assets/testlink-safety.

Requirements

  • Node.js ^22.23.2 || ^24.18.1 || ^26.5.1
  • TestLink 1.9.20 with its XML-RPC API enabled

The development and container baseline is Node 24.19.0 LTS. CI also runs Node 22.23.2 and 26.7.0.

Quick start

nvm use
npm ci
npm run build
TESTLINK_DEMO_MODE=true node dist/cli.js

Future npm invocation after publication:

npx -y testlink-mcp@1.0.8

MCP client configuration:

{
  "mcpServers": {
    "testlink": {
      "command": "npx",
      "args": ["-y", "testlink-mcp@1.0.8"],
      "env": {
        "TESTLINK_URL": "https://testlink.example.com/testlink",
        "TESTLINK_DEV_KEY": "your-testlink-dev-key"
      }
    }
  }
}

Do not put real credentials in tracked files. Copy .env.example to an ignored .env, or inject environment variables from your MCP client/secret manager.

Tools

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Testlink: common questions

Is Testlink MCP server safe?
Mostly: it is graded B (78/100). Read the Testlink safety report
How do I install Testlink?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Testlink need an API key?
Yes. The registry entry asks for TESTLINK_DEV_KEY.
Is Testlink maintained?
The last commit was 68 days ago (2026-08-29). The latest release is v1.0.8.
How does Testlink compare with other MCP servers?
safety score 78/100 (higher than 57% of 48,243 servers); downloads a week 64 (more than 50% of 12,306 servers with a package). Full comparison.

More from Eason0in →