Local-only pre-deployment scanner for risky AI agent capabilities. No telemetry.
Lurkr is a static analysis scanner for MCP server configurations, not an MCP server itself. It analyzes fixture files containing tool declarations without schemas, descriptions, or parameter definitions. The 8 tools listed are test fixtures extracted from .mcp.json and .ts files with minimal metadata. Most tools lack descriptions (6/8), none have visible input schemas, and parameter definitions are absent. Tools like 'shell' and 'run' are marked DESTRUCTIVE but have no error handling, confirmation patterns, or permission gates. This is a security scanning tool, not a production MCP server, so evaluation against the tool quality rubric is not applicable in the traditional sense.
Read-only documentation lookup
d
d
No input schemas visible for any tool. All 8 tools lack JSON Schema definitions with parameter types and constraints.
6 of 8 tools lack descriptions entirely. Only 'docs_lookup' (40 chars) and 'run'/'lookup' (1 char 'd') have any description text, all below the 10-char minimum.
Destructive tools 'shell' and 'run' have no error handling, confirmation patterns, or permission gates. No dry-run support or recovery guidance.
Tool 'shell' accepts a 'shell' parameter (bash) but no description of what command it executes, what parameters it accepts, or what it returns.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 23 | <=2025-11-25 | v2 |
Lurkr is a static analysis scanner, not an MCP server. It does not implement the MCP protocol and cannot serve tools to clients. Evaluation as an MCP server is not applicable.