mcpscoreSARIF explained: why linters speak it, and how mcpscore 1.14.0 writes it
What SARIF is, why a linter should emit it, and how mcpscore 1.14.0 turns MCP audit findings into GitHub code scanning alerts with one flag and one Action input.
Read articleBlog
Building better MCP servers
Release notes, migration guidance, and what we learn from scoring MCP servers in the wild.
Subscribe via RSSWebMCP vs MCP: what they share, where they differ
Compare WebMCP and MCP: page tools vs server integrations, shared schemas, browser support, permissions, and when to use each.
Read articlemcpscore 1.12.0: configure the rules your CI scores on
Turn rules off and re-rank the rest with a mcpscore.toml, gate CI on severity, and keep the badge canonical. Per-project rule configuration in mcpscore 1.12.0.
Read articlemcpscore 1.11.0: smoke-test your MCP tools in CI
Smoke-test real MCP tool calls after every change with mcpscore 1.11.0, while keeping invocation opt-in, deterministic, and separate from the quality score.
Read articleMCP server testing tools compared: mcpscore, Conformance, Inspector v2, and security scanners
Compare mcpscore with official MCP conformance tests, Inspector v2, and security scanners—and learn which MCP testing tool to use for each job.
Read articlemcpscore 1.3.0: audit stdio servers in any language
Run the same deterministic MCP audit against Go, Java, C#, Rust, or any other local stdio server, with secret-safe environment configuration.
Read articleMCP 2026-07-28 is here. Check your migration with mcpscore
The new MCP release changes the protocol lifecycle, transport, caching, and schemas. See what changed and use mcpscore to find migration gaps.
Read articlemcpscore 1.1.0 is here! Our first official release
After five months of building through 0.x, our first stable release brings 52-rule MCP server audits to the CLI, CI, and the web.
Read article