Loading ToolBench
Lint, security-check, fuzz, and benchmark MCP servers locally and in GitHub Actions.
mcp-sheriff is a linting/testing tool, not a production MCP server. The three mock servers in src/mock/ are intentionally flawed examples for testing the linter itself. Tool 'dangerous exec' has no description and malformed schema (Zod object used directly instead of JSON Schema). 'echo' and 'http_echo' have descriptions and basic schemas, but the 'dangerous exec' tool is deliberately broken for testing purposes. Overall quality is poor because these are not meant to be production tools, they are fixtures for the sheriff linter to evaluate.
Echoes text back to the client.
Returns text over Streamable HTTP.
Tool 'dangerous exec' has no description. LLMs cannot determine when or why to select it.
Tool 'dangerous exec' has malformed input schema: Zod object passed directly instead of JSON Schema.
Tool 'dangerous exec' is marked DESTRUCTIVE but has no error handling, confirmation step, or recovery guidance.
Parameter 'type' in 'dangerous exec' lacks description. Ambiguous parameter names force LLMs to guess intent.
Tool names 'echo' and 'http_echo' do not follow verb_noun convention. 'echo' is a noun; should be 'echo_text' or similar.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 42 | 2026-07-28+ | v2 |