MCP QA Lab

Evidence-driven quality testing for Model Context Protocol servers. MCP QA Lab connects as a real client, captures the complete model-facing contract, finds agent-usability risks, measures context cost, and runs only explicitly approved target calls.

Why use it?

A server can have perfect handler-level tests and still be difficult for an agent to use. Tool names may be ambiguous, input fields may be undocumented, pagination may be incomplete, and safety intent may be missing. MCP QA Lab tests that public protocol surface separately from implementation code.

flowchart LR
    A[Register target] --> B[Live protocol inspection]
    B --> C[Static contract checks]
    B --> D[Context-cost measurement]
    C --> E[Scenario generation]
    E --> F[Approved calls only]
    D --> G[Evidence report]
    F --> G

Highlights

• Complete paginated discovery of tools, prompts, resources, and resource templates

• Deterministic checks for schema quality, naming, descriptions, and safety annotations

• Model-facing contract size and approximate context-cost measurement

• Host-model sampling for task-oriented scenario proposals

• Explicit approval boundary for target tool calls with possible side effects

• Secret-free target registration using environment variable names, never values

• Redacted Markdown reports with reproducible evidence

• Stdio and Streamable HTTP target support

Install

Install directly from the public repository:

uv tool install "git+https://github.com/efficjump/mcp-qa-lab.git"
mcp-qa-lab --transport stdio

For source development:

git clone https://github.com/efficjump/mcp-qa-lab.git
cd mcp-qa-lab
uv sync --all-extras --locked
uv run mcp-qa-lab --transport stdio

Generic MCP client configuration

{
  "mcpServers": {
    "mcp-qa-lab": {
      "command": "mcp-qa-lab",
      "args": ["--transport", "stdio"]
    }
  }
}

Client configuration formats vary; the command and arguments above do not require a local repository path after tool installation.

Tool workflow

Safety defaults

• Remote targets are denied unless MCP_QA_ALLOW_REMOTE=1.

• Local target working directories must stay inside MCP_QA_ALLOWED_ROOTS when configured.

• Registrations reference inherited environment variable names; values are never persisted.

• Inspection and static checks never invoke target tools.

• Tools without readOnlyHint: true require explicit side-effect approval.

• Reports redact credentials, authorization headers, tokens, and URL user information.

The process boundary is not an operating-system sandbox. Run untrusted targets in an isolated environment.

Streamable HTTP

mcp-qa-lab --transport streamable-http --host 127.0.0.1 --port 8765

The default endpoint is http://127.0.0.1:8765/mcp. Keep the listener on loopback unless a separate authentication and network boundary is in place.

Development

uv sync --all-extras --locked
uv run ruff format --check .
uv run ruff check .
uv run mypy src
uv run pytest --cov --cov-report=term-missing
uv build

The coverage gate is 85%. See architecture, security policy, and contribution guide.

License

MIT