mcp-server-dump

CLI tool that connects to MCP servers via supported transports (command/stdio, streamable HTTP, and deprecated SSE), extracts server capabilities/tools/resources/prompts (optionally calling tools to include results), and outputs documentation in multiple formats (Markdown/JSON/HTML/PDF/Hugo) with customization via config files and templates.

Evaluated Mar 30, 2026 (22d ago)
Repo ↗ DevTools mcp cli documentation introspection oauth go hugo
⚙ Agent Friendliness
56
/ 100
Can an agent use this?
🔒 Security
71
/ 100
Is it safe for agents?
⚡ Reliability
29
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
72
Documentation
78
Error Messages
0
Auth Simplicity
75
Rate Limits
10

🔒 Security

TLS Enforcement
85
Auth Strength
78
Scope Granularity
70
Dep. Hygiene
45
Secret Handling
70

Supports HTTPS endpoints for OAuth/HTTP transports (implied by typical URL usage) and token caching to a local config directory with chmod 0600 (as stated). Still, it accepts arbitrary authentication headers and can invoke subprocesses (command transport), so treat MCP endpoints and supplied commands as potentially dangerous. Dependency hygiene and CVE status are not verifiable from the provided README.

⚡ Reliability

Uptime/SLA
0
Version Stability
45
Breaking Changes
40
Error Recovery
30
AF Security Reliability

Best When

You need automated, repeatable MCP server capability documentation and optional tool-call results, especially for developer docs or QA.

Avoid When

You cannot trust the MCP server being queried (since the tool can execute tool calls and may launch subprocesses for command transport).

Use Cases

  • Generate documentation for MCP servers (capabilities, tools, resources, prompts).
  • Regression/test-style verification by calling MCP tools during documentation generation.
  • Create static-site friendly outputs (Markdown with frontmatter, Hugo site structure).
  • Introspect remote MCP servers over HTTP transports including optional OAuth-protected endpoints.

Not For

  • Running as a long-lived service/API gateway.
  • Security-sensitive token custody in multi-tenant environments (because it needs local OAuth redirect and writes token cache).
  • Providing an official production API for MCP clients (it is documentation/introspection focused).

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
No
SDK
Yes
Webhooks
No

Authentication

Methods: Custom HTTP headers (-H) for Bearer and API keys OAuth 2.1 authorization code flow with PKCE (loopback redirect) for HTTP transports
OAuth: Yes Scopes: Yes

Auth is only needed when connecting to protected MCP servers over HTTP transports (SSE/streamable) or when the user supplies auth headers.

Pricing

Free tier: No
Requires CC: No

Open-source CLI (MIT) distributed via package managers/releases; no usage-based pricing indicated.

Agent Metadata

Pagination
none
Idempotent
False
Retry Guidance
Not documented

Known Gotchas

  • Command transport runs MCP servers as subprocesses; agent automation should consider timeouts and cleanup.
  • Tool calling can have side effects depending on the MCP server implementation; ensure idempotency on the server side before re-running.
  • OAuth flow is interactive by default (browser + loopback redirect) unless tokens are provided via headers; automation in headless environments may need pre-obtained tokens.
  • Rate limiting for MCP servers is not described in the provided README, so repeated tool calls may need backoff heuristics.

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for mcp-server-dump.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-30.

8642
Packages Evaluated
17761
Need Evaluation
586
Need Re-evaluation
Community Powered