Skills/npm/mcp-dev-tools

mcp-dev-tools@0.56.0

VERIFIED

Publisher claims: "A ready-to-use MCP server for Claude Code and Claude Desktop: 91 developer tools (docker, mongo, sqlite, cue, vitest, workspace) with a strict call policy." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher procedures · publishing for 33 daysInstalls 17,649Last detonated 39 min ago
$claude mcp add mcp-dev-tools -- npx -y @procedures/mcp-dev-tools
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
MCP_HTTP_TOKENConfiguration, not credentials: MCP_BUNDLES, MCP_DEBUG, MCP_FS_ROOT, MCP_HTTP_HOST, MCP_HTTP_MAX_SESSIONS, MCP_HTTP_PORT, MCP_PROGRAM_CHECK, MCP_READ_ONLY, MCP_SERVER_NAME, MCP_SERVER_VERSION, MCP_TOOL_TIMEOUT_MS
Where it talks to
no vendor host named in the code
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard. It asks for MCP_HTTP_TOKEN and talks to its vendor. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.

$vet-skills run --net declared -- npx -y @procedures/mcp-dev-tools

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-15 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 42 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
21sprocessdependency install exit 0
41sclaimed93 tools: client.chain, client.trace, client.parallel, client.conditional, client.and, client.or, client.not, client.all, client.any, client.none, client.map, client.reduce, client.identity, client.constant, client.throw, client.tryCatch, procedure.define, procedure.get, procedure.list, procedure.manifest, procedure.delete, lib.scan, lib.rename, lib.new, lib.audit
41stoolsf8a96cc9f722cd00
41stools098fe12c878cacbc
41stools80154bb34fda658f
41stools6fe71d55ff968fb6
41stools3716212330b55150
41stools854705e1851e885c
41stoolsd18705ac049b58e4
41stoolsdf136524dbe1bb81
41stools79d2d4de36d71609
41stools491c78c72b1b6a27
41stools94a3f97351117d83
41stoolsceba6a328fcb263e
41stools0d7ef8c314f9c46f
41stoolsa36e8589a2cf3ab8
41stoolsaa11580b9530651f
41stoolsffaec7b1b4ee77ab
41stoolsdd019e90643a5b3a
41stoolsb52c1e2ef9e8d718
41stools3a5851a08f1f1160
41stoolsd74f556f705daa2b
41stoolsf4bc14e1e81271b1
41stoolse5b6b13d563960cf
41stools11cbc616faa4acf5
41stoolscf39a1ebcaea04d4
41stools3ec26de4270edc67
41stoolsb760688a052611a8
41stools4e28ee7973cdc782
41stools5eb45abf08af9684
41stools96a7259828a40534
41stoolsd836e7cfb217af99
41stools8166d7162450222a
41stoolsf89f5cb86feb62b3
41stools6d505dfa44ec5c63
41stools6e5249c143bcd337
41stools53541bcd54a146d9
41stools4bd518307119426d
41stools11ee0f57a7586719
41stools8b25068ab6f8116f
41stools7ddc27aef90d2aae
41stools0ecd2519a047cc70
41stoolsc992894c0ce791c2
41stools0bf7434aa498c2da
41stools36228aeda1d68d21
41stools985feedb04b4861e
41stools4cd99d270b870245
41stools712bee5e5e2647ec
41stools01cdf3e49613ebe3
41stools46eb3b4e4d5790da
41stools69c2fa56cae94718
41stoolsc68dfb4cd392e817
41stoolse4548b736236be65
41stoolsecb15d212a52ba01
41stools2b1919b902bae41b
41stoolseb184a871197caff
41stools2cc51348d95a4bf4
41stools323119280272089c
41stoolsc1de360c255ca5c4
41stoolsa56a382abdbd4e33
41stoolsa58ddb9c300739db
41stoolsa16881e6624e65ce
41stools263ea3cf81fa745b
41stools10546bdbfd850ec0
41stools7743962332cc4ead
41stoolsd7b80d80f02da45a
41stools3729f05e83b4f245
41stools2b63d4e051789b36
41stools76033c6540f1e0bd
41stools6c1235b15bb08f5c
41stools228f02303b4696dc
41stoolsdde88d13c6bc3eb1
41stoolsa7b2d8bc96403e86
41stoolsc2345b511b0d0230
41stools656c377955acfc6e
41stools1982f5c8ad36f68e
41stoolsb598971f6896e461
41stools5e5adad541dfe8fa
41stoolsfe0e09c2e2743c05
41stools922a84bea9dbbb38
41stools7017574b243df172
41stools287232e3fb3467fa
41sprocessscript backend runs setup only
41sprocessno install scripts to re-run

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)dist/host.js:163 · MCP server using network transport (SSE/HTTP) — data sent over networkconsole.error(`[mcp-server] Streamable HTTP at ${url}${config.http.token ? " (send Authorization: Bearer <token>)" : ""}`);Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/host.ts:193 · MCP server using network transport (SSE/HTTP) — data sent over networkexport async function runDevToolsServer(config: McpServerConfig = loadConfig(), run?: RunOptions): Promise<RunningDevToolsServer> {Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/host.d.ts:70 · MCP server using network transport (SSE/HTTP) — data sent over networkexport declare function runDevToolsServer(config?: McpServerConfig, run?: RunOptions): Promise<RunningDevToolsServer>;Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/host.ts:225 · MCP server using network transport (SSE/HTTP) — data sent over networkconsole.error(`[mcp-server] Streamable HTTP at ${url}${config.http.token ? " (send Authorization: Bearer <token>)" : ""}`);Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

Cost to the agent

Instructions loaded
≈79 tok
1 file · 20 in bundle
Tool list per prompt
≈13,596 tok
93 tools · 146 per tool
Handshake
5288 ms
launch to tools/list, stdio
Undocumented tools
9
description under 20 chars · avg 45

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @procedures/mcp-dev-tools@0.56.0 as of 12 min ago. This is the package itself, not its dependencies.