███╗ ███╗ ██████╗██████╗
████╗ ████║██╔════╝██╔══██╗
██╔████╔██║██║ ██████╔╝
██║╚██╔╝██║██║ ██╔═══╝
██║ ╚═╝ ██║╚██████╗██║
╚═╝ ╚═╝ ╚═════╝╚═╝
O B S E R V A T O R Y
MCP Observatory is the GitHub-native CI and security gate for MCP servers before agents depend on them.
It turns a local MCP check into evidence maintainers already understand: GitHub Actions, SARIF, Code Scanning findings, score badges, reproducible run artifacts, and maintainer-ready PR copy.
- Test one MCP server locally.
npx @kryptosai/mcp-observatory test npx -y my-mcp-server --campaign launch-proof- Convert the passing check into CI.
npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y my-mcp-server" --sarif --campaign launch-proof- Verify the adoption kit.
npx @kryptosai/mcp-observatory setup-ci --doctor- Catch MCP startup, tool listing, prompt, resource, schema, and drift failures before agents rely on a server.
- Convert a one-off local check into a repeatable GitHub Action without hand-writing workflow YAML.
- Emit normalized SARIF so MCP findings can appear in GitHub Code Scanning.
- Share reproducible JSON and Markdown evidence without exposing private telemetry.
- Let coding agents run Observatory as an MCP server and inspect other MCP tools autonomously.
- GitHub Code Scanning for MCP servers
- Code Scanning demo
- MCP Server Safety Index
- Target gallery
- Public proof log
- Agent task pack
If MCP servers are becoming production dependencies, use the same evidence model privately:
- CI rollout for selected MCP servers
- SARIF and GitHub Code Scanning setup
- private readiness review
- prioritized fixes and owner-ready next steps
- Safety Index-style report for internal agent dependencies
See the MCP Readiness Review. The default package starts at $2,500.