AgentBreakWatch MCP Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@AgentBreakWatch MCP Servercheck my .mcp.json for breaking changes and unpinned servers"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AgentBreakWatch MCP Server (agentbreakwatch-mcp)
Official Model Context Protocol (MCP) server for AgentBreakWatch, the live breaking-change and tools/list JSON Schema drift telemetry index across 30 core AI Agent SDKs and 226 MCP servers (256 total tracked packages) on npm and PyPI.
Live Web App & Stack Auditor: https://agentbreakwatch.com
Interactive
.mcp.json&package.jsonChecker: https://agentbreakwatch.com/checkOctober 2026 Volatility & Drift Report: https://agentbreakwatch.com/drift-report
Remote Streamable HTTP MCP Endpoint:
https://agentbreakwatch.com/api/mcpLLM Context Index (
/llms.txt): https://agentbreakwatch.com/llms.txtFull LLM Dump (
/llms-full.txt): https://agentbreakwatch.com/llms-full.txtOpenAPI 3.1 Spec (
/openapi.json): https://agentbreakwatch.com/openapi.json
Quick Connect (Zero-Install Remote MCP)
Add the hosted Streamable HTTP endpoint directly to your .mcp.json, Cursor, Claude Code, or Claude Desktop config with zero local dependencies:
{
"mcpServers": {
"agentbreakwatch": {
"url": "https://agentbreakwatch.com/api/mcp"
}
}
}Or run locally via npx (stdio transport):
{
"mcpServers": {
"agentbreakwatch": {
"command": "npx",
"args": ["-y", "agentbreakwatch-mcp"]
}
}
}Related MCP server: shipcheck-mcp
Available MCP Tools
check_stack_drift: Pass the raw contents of a.mcp.json,package.json, orrequirements.txtfile to detect breaking major version jumps, unpinned@latestMCP servers, and archived packages, with exact version pin commands.get_package_stability: Retrieve live npm/PyPI version, publish date, 90-day release velocity, 0-100 stability score,tools/listschema drift risk, and copy-paste before/after migration code for any of the 256 tracked packages.list_volatile_packages: Query the fastest-changing Agent SDKs and MCP servers over the last 90 days, optionally filtered bykind(sdkormcp) or ecosystem category.get_archived_mcp_replacements: Retrieve the migration matrix for archived@modelcontextprotocol/server-*packages (server-github,server-postgres,server-puppeteer,server-brave-search,server-redis) and their official 2026 vendor-maintained replacements.
Browse Ecosystem Stability Hubs
License
MIT - AgentBreakWatch
Available Tools
4 toolscheck_stack_driftARead-onlyIdempotentInspect
Read-only audit of a package.json, requirements.txt, or .mcp.json configuration string against 256 live AI Agent SDKs and MCP servers. Flags breaking major version deltas, unpinned @latest MCP servers, and outdated dependencies with exact pin commands. Requires no authentication and returns a structured JSON report.
| Name | Required | Description | Default |
|---|---|---|---|
| manifest | Yes | Raw contents of .mcp.json, package.json, requirements.txt, or a newline-separated list of packages |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld=false, and non-destructive, so the safety profile is covered; the description still earns credit by adding 'requires no authentication' and stating the return shape (structured JSON report with exact pin commands), which the annotations do not provide. It stops short of describing rate limits or registry-freshness caveats for the '256 live' claim, keeping it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences, front-loaded with the verb and read-only nature, then the detection scope, then auth and return type. Every clause carries information and nothing is repeated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description does the necessary work of saying it returns a structured JSON report including pin commands; combined with full schema coverage and rich annotations, an agent has enough to call it correctly. It is slightly thin on what the report actually contains (fields, severity levels) and on the '256 live' registry being static or refreshed, which matters for a drift-audit tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single parameter's schema description already lists all accepted manifest formats, including the newline-separated package list. The description repeats 'package.json, requirements.txt, or .mcp.json configuration string' without adding syntax, size limits, or validation rules, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: a read-only audit of a package.json/requirements.txt/.mcp.json manifest against a live SDK/MCP registry, and names what it flags (major deltas, unpinned @latest, outdated deps). The manifest-wide audit scope implicitly separates it from get_package_stability's single-package focus, but no sibling is ever named, so the differentiation is inferential rather than explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the resource it operates on — you'd call it when you have a manifest or package list to audit — but there is no explicit 'use this when' statement, no exclusions, and no routing to get_package_stability, list_volatile_packages, or get_archived_mcp_replacements. An agent must infer the boundary from the nouns alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_archived_mcp_replacementsARead-onlyIdempotentInspect
Read-only lookup returning the complete migration matrix for archived or frozen @modelcontextprotocol/server-* reference packages and their official 2026 vendor-maintained replacements. Takes no parameters and requires no authentication.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=false, covering the safety profile. The description adds useful context: 'Takes no parameters and requires no authentication.' However, it does not describe the return format or any other behavioral traits beyond what annotations provide. A 3 is appropriate given the lower bar with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly written sentences with the core purpose front-loaded. Every sentence earns its place: the first defines the lookup and its scope, the second clarifies no parameters and no authentication. No waste or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless lookup with rich annotations and no output schema, the description is nearly complete. It states that the return is a 'complete migration matrix' but does not detail its structure or contents, which is a minor gap. The no-auth and no-params statements round out the call context well.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description explicitly confirms 'Takes no parameters', which aligns with the empty schema and reinforces that no input is needed. No further parameter semantics are required.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('lookup') and a well-defined resource ('migration matrix for archived or frozen @modelcontextprotocol/server-* reference packages and their official 2026 vendor-maintained replacements'). It does not explicitly name or differentiate from siblings like check_stack_drift, but the domain is distinct enough that an agent can infer the difference. Score 4 because sibling differentiation is absent.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states what the tool does but gives no guidance on when to use it versus alternatives such as check_stack_drift or get_package_stability. It also provides no exclusions or preconditions beyond 'requires no authentication'. An agent must infer the use case from the purpose statement alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_package_stabilityARead-onlyIdempotentInspect
Read-only lookup of live npm or PyPI version, publish timestamp, 90-day release velocity, stability score (0-100), MCP tools/list schema drift risk, and before/after migration code for a single AI Agent SDK or MCP server. Prefer this over check_stack_drift when inspecting one specific package by name or slug.
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | Package name or slug (e.g. 'openai', '@modelcontextprotocol/sdk', '@playwright/mcp', 'fastmcp', 'mcp-clickhouse') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so 'Read-only lookup' is largely redundant. The description earns credit for what annotations cannot convey: it enumerates the returned signals (publish timestamp, 90-day velocity, 0-100 stability score, tools/list drift risk, before/after migration code), which is meaningful given there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler: the capability and returned signals come first, the disambiguation against the sibling last. The output enumeration is dense but each item carries information an agent needs absent an output schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter, read-only, non-destructive lookup with no output schema, the description supplies the return-value surface, the input scoping rule, and the sibling routing. Nothing material is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and already supplies examples, so the baseline is 3. The description still adds semantic framing — the package must resolve to 'a single AI Agent SDK or MCP server' and may be a name or a slug — clarifying that scoped/glob or multi-package inputs are not intended.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb ('Read-only lookup') plus a precisely scoped resource ('live npm or PyPI version... for a single AI Agent SDK or MCP server'), and it enumerates exactly what the lookup returns. An agent can distinguish this from check_stack_drift without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes the agent: 'Prefer this over check_stack_drift when inspecting one specific package by name or slug,' which implies the sibling for multi-package/stack-level checks. It does not address the other siblings (list_volatile_packages, get_archived_mcp_replacements), so the coverage of alternatives is partial rather than complete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_volatile_packagesARead-onlyIdempotentInspect
Read-only query that lists the fastest-changing or highest schema-drift-risk AI Agent SDKs and MCP servers from the live AgentBreakWatch telemetry index, sorted descending by 90-day release velocity. Supports filtering by kind ('sdk', 'mcp', 'all'), category hub slug, and result limit (1-50).
| Name | Required | Description | Default |
|---|---|---|---|
| kind | No | Filter by Agent SDK ('sdk'), MCP server ('mcp'), or 'all' | |
| limit | No | Maximum number of packages to return (default 15, max 50) | |
| category | No | Optional category hub slug (e.g. 'agent-sdks', 'aws-labs', 'database-backend', 'browser-automation', 'cloud-infra') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the read-only, idempotent, non-destructive, closed-world safety profile. The description adds useful behavioral context beyond annotations by identifying the live telemetry source and specifying descending sort order by 90-day release velocity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no wasted language. The core purpose and ranking are front-loaded, and the filter summary follows efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only list tool with three optional parameters and no output schema, the description is mostly complete: it covers purpose, source, sorting, and filters. The remaining gap is that it does not describe the shape of returned package records, which is more relevant because no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents kind, limit, and category in detail. The description echoes the filters and the 1-50 limit range but does not add syntax or usage nuance beyond what the schema provides, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb and resource: it lists fastest-changing or highest schema-drift-risk AI Agent SDKs and MCP servers. It clearly defines the ranking basis as descending 90-day release velocity, but it does not explicitly distinguish itself from siblings such as get_package_stability.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description indicates the tool is a read-only query and summarizes its filter options, implying it should be used to retrieve volatile package rankings. However, it never states when to use this tool instead of siblings like get_package_stability or check_stack_drift, nor does it provide explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.2.0- First observed
check_stack_drift - First observed
get_archived_mcp_replacements - First observed
get_package_stability - First observed
list_volatile_packages
TDQS
Scored across 4 tools
The four tools target distinct operations: whole-config audit, single-package lookup, archived-package migration matrix, and telemetry-ranked listing. The only real overlap is check_stack_drift vs get_package_stability, but the description explicitly disambiguates when to prefer each. An agent can reliably pick the right tool.
All names use consistent snake_case with clear verb prefixes (check_, get_, list_) followed by specific nouns. No mixed conventions or vague verbs; patterns are predictable across the set.
Four tools is well-scoped for a focused dependency/version-auditing service. Each tool covers a distinct query surface with no redundancy or filler.
Core lifecycle is covered: discovery (list_volatile_packages), single-package inspection, stack audit, and archived-package migration. Minor gaps exist—no free-text search across the 256-package index or bulk/batch audit of multiple packages—but agents can work around these via single-package lookups.
Maintenance
Related MCP Connectors
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
Monitor MCP servers, API contracts and AI outputs for schema drift. Alerts on breaking changes.
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceProvides breaking changes analysis for libraries across multiple languages, enabling version upgrade planning, dependency audits, and migration reports through MCP tool access and expert workflows.-
- AlicenseNot gradedqualityBmaintenanceEnables MCP-compatible AI agents to scan code for leaked secrets, copyleft licenses, unprotected routes, missing privacy policies, and risky card handling before committing or shipping.163 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables authorized security auditing of AI-agent supply chains and agent-facing surfaces: deterministic local skill-bundle audits against eight attack patterns, secrets scanning, and scope-gated read-only recon of agent endpoints and MCP surfaces.MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents and MCP-compliant clients to audit software bills of materials and quarantine supply-chain malicious package dependencies using Snyk and Socket.dev.8-