Diagnoses, benchmarks, and performs security audits on Slack MCP server connections, including token exposure detection.
mcp-doctor
Diagnose, secure, and benchmark your MCP servers.
A fast CLI that finds every MCP server configured across your dev tools, tests connections, flags security issues, and benchmarks latency — in seconds.
Quick Start
npx @wigu/mcp-doctor scanCommands
scan — Test all MCP server connections
Discovers configs and verifies each server responds to a JSON-RPC handshake.
$ mcp-doctor scan
┌─────────────────────────────────────────┐
│ mcp-doctor v0.1.0 │
│ Diagnose · Secure · Benchmark │
└─────────────────────────────────────────┘
✔ Found 3 server(s)
┌──────────────┬────────────┬─────────┐
│ Server │ Source │ Status │
├──────────────┼────────────┼─────────┤
│ filesystem │ Claude │ ✔ OK │
│ postgres │ Cursor │ ✔ OK │
│ slack │ VS Code │ ✘ FAIL │
└──────────────┴────────────┴─────────┘security — Audit configs for security issues
Checks for leaked secrets, overly broad permissions, and risky command patterns.
$ mcp-doctor security
⚠ 2 issues found
┌──────────┬──────────┬───────────────────────────────┐
│ Severity │ Server │ Issue │
├──────────┼──────────┼───────────────────────────────┤
│ HIGH │ postgres │ Plaintext password in config │
│ MEDIUM │ slack │ Token visible in args │
└──────────┴──────────┴───────────────────────────────┘bench — Benchmark server response times
Measures JSON-RPC round-trip latency for every configured server.
$ mcp-doctor bench
┌──────────────┬──────────┬────────┐
│ Server │ Latency │ Rating │
├──────────────┼──────────┼────────┤
│ filesystem │ 12ms │ fast │
│ postgres │ 87ms │ ok │
│ slack │ timeout │ — │
└──────────────┴──────────┴────────┘Supported Tools
Tool | Config Auto-Detected |
Claude Code | Yes |
Claude Desktop | Yes |
Cursor | Yes |
VS Code | Yes |
Windsurf | Yes |
mcp-doctor reads each tool's config file from its standard location and merges all discovered servers into a single view.
What It Checks
Connection health — JSON-RPC
initializehandshake against every serverSecurity issues — plaintext secrets, tokens in args, dangerous commands
Latency benchmarks — round-trip timing with fast / ok / slow ratings
Install
# Run directly
npx @wigu/mcp-doctor scan
# Or install globally
npm install -g @wigu/mcp-doctor
mcp-doctor scanRequires Node.js 18+.
Contributing
Contributions are welcome! Open an issue or submit a pull request.
Fork the repo
Create a feature branch (
git checkout -b my-feature)Commit your changes
Open a PR