Audit MCP server manifests and tool schemas for least-privilege, secret, and side-effect risks.
Scoring was not performed