Back to Browse

Test Shape MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Audit local test structure using aggregate assertions without returning test names, paths, or...

About

Audit local test structure using aggregate assertions without returning test names, paths, or...

Security Report

7.2
Moderate7.2Low Risk

test-shape-mcp is a well-designed local-first developer tool with strong privacy protections and appropriate security boundaries. The server reads only aggregate test statistics without exposing test names, paths, or source code. Authentication is not required (appropriate for a local analysis tool), and file access is properly scoped with directory traversal protections and depth/size limits to prevent abuse. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

6 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-test-shape-mcp": {
      "args": [
        "-y",
        "test-shape-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

test-shape-mcp

Test Shape gives a quick structural view of a local test suite. It counts test blocks, suites, async tests, assertion-bearing files, and empty test bodies without exposing test names or code.

Quick start

npm install
npm test
npm start

Use inspect_test_shape against a local project. Results are heuristics for review triage, not a replacement for running tests.

Privacy and limits

Only bounded local test files are read. The response contains aggregate counts only. Test names, paths, source, and assertion details are suppressed.

Reviews

No reviews yet

Be the first to review this server!