Show HN: Mcpward – contract and security testing for MCP servers in CI

Category: devtools

Tags: mcp, contract-testing, security, ci-cd, typescript

Score: 7.3/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 7)

MCPward is a contract and security testing tool for MCP servers, designed to run in CI pipelines. It snapshots server contracts (tool schemas, descriptions, annotations) and detects drift, flagging breaking changes, security issues like tool poisoning, and protocol violations. It fills a gap in MCP tooling by treating servers as dependencies with enforceable contracts.

Target audience: backend developers, devops engineers, security engineers

Repository: https://github.com/TsvetanG2/mcpward · TypeScript · Apache-2.0 · 8 stars

View on Hacker News