MCP.Market

Observatory MCP server

by KryptosAI·io.github.KryptosAI/mcp-observatory·v1.36.1·121 stars
No reviews yet

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

B77/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Established

121 stars1.4k downloads/wk

Reviews

Write one

Nobody has reviewed Observatory yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Observatory tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-06 · same rubric, same numbers if you re-run it

2 medium
  • Code scan231 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: ….", "prepack": "npm run build", "postinstall": "node scripts/postinstall.mjs", "pr…
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Observatory compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 45% of 1,113 Developer tools servers
GitHub stars
121
more than 95% of 857 Developer tools servers
Downloads a week
1,361
more than 94% of 510 Developer tools servers with a package

Install Observatory in Claude Code, Cursor or VS Code

Runs npx -y @kryptosai/mcp-observatory on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-observatory -- npx -y @kryptosai/mcp-observatory
Add to Cursor

What the publisher says

From the Observatory repository's README, as published. We do not edit it. Read it on GitHub

MCP Observatory

More badges

Secure the MCP servers you're building. MCP Observatory is the CI-native security tool for teams shipping custom MCP servers. Test during development, catch schema drift, simulate attacks, and generate compliance evidence — before agents depend on your servers.

Also available in Simplified Chinese.

Runtime enforcement: Use mcp-seatbelt to block dangerous MCP tool calls at runtime based on observatory scan results.

Get Started

Step-by-step setup guide · macOS, Windows, Linux · Node.js 20+ and npm (install Node.js LTS).

1. Run your first scan

Open Terminal or PowerShell in your project folder and paste:

npx -y @kryptosai/mcp-observatory@latest

This downloads Observatory and checks your first configured MCP server. With no configured server, it uses an included example. To try only that example, run npx -y @kryptosai/mcp-observatory@latest demo --example.

2. Read the result

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Observatory: common questions

Is Observatory MCP server safe?
Mostly: it is graded B (77/100). Read the Observatory safety report
How do I install Observatory?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Observatory need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Observatory maintained?
The last commit was 11 days ago (2026-11-04). The latest release is v1.36.1.
What can I use instead of Observatory?
Servers from other publishers that do the same job: cloud-audit MCP server, Repowise MCP server and Git MCP server.
How does Observatory compare with other Developer tools MCP servers?
safety score 77/100 (higher than 45% of 1,113 Developer tools servers); github stars 121 (more than 95% of 857 Developer tools servers); downloads a week 1,361 (more than 94% of 510 Developer tools servers with a package). Full comparison.

Alternatives to Observatory

Same job from other publishers: the closest match first, then the best rated.

  • cloud-audit
    AWS security scanner with attack chain detection, IAM privilege escalation, and fixes
    A
  • Repowise
    Codebase intelligence for AI coding agents: graph, git history, docs, decisions, code health.
    B
  • Git
    Comprehensive Git MCP server enabling native git tools including clone, commit, worktree, & more.
    A
  • Evalview
    Regression testing for AI agents. Golden baselines, CI/CD, LangGraph, CrewAI, OpenAI, Claude.
    B
  • Grasp — Code Architecture & Dependency Analysis
    Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
    C
Observatory vs cloud-audit

More from KryptosAI →