CheckMCP
‹ directory
69MCP SCORE
D

smspva-docs

https://mcp.smspva.com/docs
4 tools3 resources~1.1k tok/req100% annot.proto 2024-11-05
View public page ›
Xin
Raw JSON ›

Score by pillar

Security ·2075
Tool design ·18100
Schemas / desc ·1658
Reliability ·1480
Context-cost ·1289
Compliance ·1286
Coverage ·860

reliability: LOW (T1 single-shot, not credited - requires T3 >=24h)

Context-cost

1.1ktokens for tools/list

Paid on every request. Lean footprint for 4 tools.

this server1.1k
median≈ 3k

MCP primitive coverage

the quality score covers tools
4
Tools
3
Resources
0
Prompts · none

Why this score — causal attribution

Each penalty: measure → mechanism → effect → Δscore.

Security · CRITICAL−5

[MCP06] lethal trifecta: untrusted-content ingestion + sensitive-data access + exfil/destruction -> an injection can exfiltrate → MCP security flaw → tool: (serveur)

Schemas / desc · HIGH−3.5

50% typed+described params → schema = the contract the agent fills in → more malformed calls

Compliance · MEDIUM−1.6

proto 2024-11-05 (4 rev. behind 2025-11-25) → outdated protocol version → recent features unavailable, recent clients weakened

Compliance · LOW−0.6

no OAuth discovery (.well-known missing) → RFC 9728/8414 not exposed → auth not auto-discoverable by clients

Security — OWASP MCP Top 10

MCP06CRITICAL(serveur)

Badge — paste it in your README

MCP Score badge — smspva-docs[![MCP Score](https://checkmcp.dev/badge/mcp-smspva-com.svg?url=https%3A%2F%2Fmcp.smspva.com%2Fdocs)](https://checkmcp.dev/report?url=https%3A%2F%2Fmcp.smspva.com%2Fdocs)
Own this server?Get verified — fresh re-audit, badge if you pass ›

About smspva-docs — FAQ

Is the smspva-docs MCP server safe to use?+
CheckMCP audited smspva-docs and gave it an MCP Score of 69/100 (grade D) — weak — significant issues; review the findings before trusting it with sensitive data or tools. The audit runs an OWASP MCP Top 10 security pass (tool poisoning, hardcoded secrets, command injection, the lethal trifecta) against the live endpoint; see the per-pillar breakdown and the "why this score" attribution on this page, and re-audit anytime at checkmcp.dev.
What is the MCP Score of smspva-docs?+
smspva-docs scores 69/100 (grade D) on CheckMCP's vendor-neutral audit across six weighted pillars — security, tool design, schemas, context-cost, compliance and coverage — with reliability measured and shown but not yet credited.
How many tools does smspva-docs expose, and what is its context cost?+
smspva-docs exposes 4 tools, and its tools/list response costs roughly 1.1k tokens — paid on every request your agent makes to it. Lower is better for your context budget.
How was smspva-docs scored?+
By probing the live MCP endpoint (https://mcp.smspva.com/docs), inspecting its tools, schemas and protocol compliance, running an OWASP MCP Top 10 security pass, and measuring the token cost of tools/list — then attributing every penalty as measure → mechanism → effect. The methodology is open: checkmcp.dev/#methodology.