[mcp-inspector] MCP Inspector Report - 2026-10-12

[github-actions[bot]]

🔍 MCP Inspector Report - 2026-10-12

Summary

• Files Inspected: 25 (.github/workflows/shared/mcp/*.md)
• Active MCP servers: 17 (+ serena-go wrapper)
• By Type: HTTP: 8, Container: 4 (+1 serena-go wrapper), Local: 5
• Disabled (CVEs): 4 · Non-MCP utilities: 2 (sentrux CLI, slack safe-job)

Inventory Table

Server	Type	Tools	Secrets	Status
agentdb	local (npx, agentdb@3.0.0-alpha.20)	*	N	⚠️ alpha, wildcard
ast-grep	local (npx, ast-grep-mcp@0.0.2)	*	N	⚠️ wildcard
azure-devops	http	*	Y (ADO_MCP_AUTH_TOKEN)	⚠️ wildcard
azure	container (azure-mcp:latest)	6	Y (tenant/client id/secret)	⚠️ unpinned
datadog	http	6	Y (DD_API_KEY, DD_APPLICATION_KEY/DD_APP_KEY, DD_SITE)	✅
deepwiki	http	3	N	✅
fabric-rti	local (uvx, pinned 0.6.2)	13	Y (Azure creds)	✅
grafana	container (1.1.0-alpine, --disable-write)	7	Y (GRAFANA_URL, token)	✅
graft	local (npx, pinned 0.8.0)	6	N	✅
jupyter	http + service containers	5	Y (JUPYTER_TOKEN)	✅ digest-pinned
kreuzberg	container (1.3.6)	10	N	✅
mempalace	http (local pip server)	19	N	⚠️ write/delete tools
microsoft-docs	http	*	N	⚠️ wildcard
sentry	local (npx, pinned 0.33.0)	16	Y (SENTRY_ACCESS_TOKEN, optional OPENAI key)	✅
serena	container (1.7.0)	n/a (all)	N	⚠️ rw mount
serena-go	import wrapper (serena + Go setup)	n/a	N	✅
skillz	container (digest-pinned)	*	Y (github.token)	⚠️ wildcard
svelte	http	5	N	✅
tavily	http	*	Y (TAVILY_API_KEY)	⚠️ wildcard
brave / markitdown / notion / semgrep	disabled	0	–	❌ removed for Critical/High CVEs (#48546, #49515, #49517, #49520)
sentrux	CLI install step (sha256-verified 0.5.7)	–	N	✅
slack	safe-output job	1	Y (SLACK_BOT_TOKEN)	✅

Recommendations

1. Pin azure container version/digest instead of latest.
2. Replace allowed: ["*"] with explicit tool lists for agentdb, ast-grep, azure-devops, microsoft-docs, skillz, tavily.
3. Review mempalace's mempalace_delete_drawer/kg_invalidate exposure; consider read-only.
4. serena mounts the workspace rw; consider ro for analysis-only workflows.
5. agentdb is an alpha release; evaluate stability.
6. Track the four disabled servers' upstream CVE fixes; delete stub files if they won't return.

Generated by 🔍 MCP Inspector Agent · copilot · auto · 14.8 AIC · ⌖ 0.735 AIC · ⊞ 9K · ◷

• expires on Oct 13, 2026, 10:57 AM UTC-08:00