mcpcheck · weekly or nightly checks for MCP publishers

Your server broke on Windows, in Cursor, or on OAuth refresh last night. We tell you before your users do.

Enroll a remote Streamable HTTP URL or an npx/uvx package. On Server, every week we clean-install it on three operating systems and diff the tool catalog. On Server Pro we do that every night, and also connect with the clients your users run, check OAuth end to end and score error messages. On both plans, a remote server's tasks and subscriptions/listen support is checked against MCP 2026-07-28, with the date each check has passed since. A badge on your README says exactly what passed.

Badge example: mcpcheck badge

What the checks cover

Clean install · Win/mac/Linux

Fresh npm/uv cache on GitHub-hosted Windows, macOS and Linux runners; spawn over stdio (or connect to your URL), initialize, tools/list. The Windows npx ENOENT that broke six official plugins shows up here first.

Client matrix

Official TypeScript and Python SDK clients at the current and previous minor, plus a scripted Claude Code connection check. Cursor and VS Code embed the TypeScript client, so the badge says what actually works.

OAuth conformance

401 challenge, protected-resource metadata, authorization-server metadata, PKCE S256, dynamic client registration, refresh grant, resource indicator — each failure with the fix in plain English. Live refresh when you give us a refresh token.

Tool-catalog drift

tools/list hashed every run and diffed against your baseline: removed tools, renamed arguments, tightened schemas, changed descriptions. Rug-pull watch for your own server, alerted by email/Slack/Discord.

Error ergonomics

10 malformed inputs per tool, every error graded on code · cause · fix · retryable. The one place we use an LLM (≤ $0.02 per server per run); the score is on the report.

Tasks & subscriptions/listen · both plans

For remote servers on MCP 2026-07-28: 9 tasks-extension checks and 3 subscriptions/listen checks, run when server/discover advertises them. Each quotes its rule from the spec, names the official conformance check it mirrors, and shows “conformant since” a date that carries over from run to run. No tool is called and nothing is created on your server.

CLI paths only — no GUI automation. Results on a no-JavaScript report page, report.json, trust.json and the badge. Runner: public GitHub Actions repo agentwares/runner.

Pricing — per server

Preview
$0
  • one full baseline run
  • public report + badge
  • no schedule, no alerts
Server
$19/server/mo
  • weekly runs
  • clean install matrix
  • catalog diff
  • badge
  • tasks and subscriptions conformance
  • 30-day history · alerts
Server Pro
$49/server/mo
  • nightly runs
  • clean install matrix
  • catalog diff
  • badge
  • client compat matrix
  • oauth conformance
  • error ergonomics
  • tasks and subscriptions conformance
  • 90-day history · alerts

Machine-readable: /mcpcheck/pricing.json · for agents: /mcpcheck/llms.txt.