Show HN: What [67] MCP servers do at startup, with the internet cut off

Category: security

Tags: mcp, security-audit, sandbox, testing, typescript

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 6)

A measurement harness that installs and runs 67 MCP servers in a sealed Linux sandbox, calling each declared tool with fixed arguments and verifying results against independent oracles like syscall traces, git, and a local web server. It enforces a calibration gate where planted lies must be caught before any real results are published. This is a rigorous, reproducible approach to auditing MCP server honesty and credential handling.

Target audience: security engineers, MCP server maintainers, devops

Repository: https://mcp.brydge-ai.com · TypeScript

View on Hacker News