1. Conduid
  2. Security
  3. MCP Protocol Conformance
MCP server · Security

MCP Protocol Conformance

MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.

Unclaimed security
37Low

Scored 5 months ago · breakdown

About MCP Protocol Conformance

MCP Protocol Conformance is an MCP server in the Security category: mCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.

Install

Claude Code
claude mcp add protocol-conformance -- npx -y mcp-protocol-conformance
npx
npx -y mcp-protocol-conformance

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (12)

1`runJsonRpcCompliance`

Parameters not published.

10`generateReport`

Parameters not published.

11`compareManifests`

Parameters not published.

12`assertNoBreakingChanges`

Parameters not published.

2`runSpecVersionAssertion`

Parameters not published.

3`runTransportSuite`

Parameters not published.

4`runOauthPkceFlow`

Parameters not published.

5`runToolSchemaValidation`

Parameters not published.

6`runCapabilityIntrospection`

Parameters not published.

7`runRoundtripSmoke`

Parameters not published.

8`runAnnotationsAudit`

Parameters not published.

9`runFullSuite`

Parameters not published.

Ask AI

✦

Ask AI about MCP Protocol Conformance

Powered by Claude · Grounded in docs

I know everything about MCP Protocol Conformance. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

Part of the StudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it

mcp-protocol-conformance

Conformance test harness for Model Context Protocol servers. Validates JSON-RPC 2.0 wire compliance, spec-version handshake, transport behaviour, OAuth 2.1 PKCE, tool schemas, capability advertisement, smoke roundtrip, and annotation hygiene against MCP spec 2024-11-05, 2025-03-26, and 2025-06-18.

This is a Foundation build of the StudioMeyer MCP Factory: every other Factory build runs through this harness before promotion (npm publish, marketplace submit, upstream PR).

A note from us

We have been building tools and systems for ourselves for the past two years. The fact that this repo is small and has few stars is not because it is new. It is because we only just decided to share what we have built. It is not a fresh experiment, it is a long story with a recent commit.

We love building things and sharing them. We do not love social media tactics, growth hacks, or chasing stars and followers. So this repo is small. The code is real, it gets used, issues get answered. Judge for yourself.

If it helps you, sharing, testing, and feedback help us. If it could be better, an issue is more useful. If you build something with it, tell us at hello@studiomeyer.io. That genuinely makes our day.

From a small studio in Palma de Mallorca.

Install

npm install --save-dev mcp-protocol-conformance

The package ships both a CLI (mcp-conformance) and a TypeScript library entry (import ... from "mcp-protocol-conformance").

CLI usage

Run against a stdio server

mcp-conformance run \
  --target stdio \
  --cmd node \
  --cmd-arg dist/server.js \
  --spec 2025-06-18 \
  --suite all \
  --format terminal

Run against an HTTP server (Streamable HTTP, 2025-03-26+)

mcp-conformance run \
  --target http \
  --url https://memory.studiomeyer.io/mcp \
  --header "Authorization:Bearer ${TOKEN}" \
  --spec 2025-06-18 \
  --suite full \
  --format json --out report.json

Run only a subset of suites

mcp-conformance run --target stdio --cmd ./server --spec 2025-06-18 \
  --suite jsonrpc,version,schema

Compare two manifests

mcp-conformance compare \
  --expected manifests/v1.json \
  --actual   manifests/v2.json

Assert no breaking changes between two reports

mcp-conformance assert-no-breaking \
  --baseline reports/main.json \
  --current  reports/pr-42.json

Exit codes: 0 clean, 1 failures, 2 invocation error.

Library usage

import {
  runFullSuite,
  generateReport,
} from "mcp-protocol-conformance";

const report = await runFullSuite(
  { kind: "stdio", cmd: "node", args: ["dist/server.js"] },
  "2025-06-18",
  { suite: "all" },
);

console.log(generateReport(report, "terminal"));
if (report.status === "fail") process.exit(1);

MCP server usage

The harness is itself an MCP server. Start it over stdio and any MCP client can call its 12 tools:

node dist/server.js

Tools (all read-only, all destructiveHint: false):

# Tool Purpose
1 runJsonRpcCompliance JSON-RPC 2.0 error-code suite
2 runSpecVersionAssertion Verify advertised protocolVersion
3 runTransportSuite Transport-layer ping + session-id
4 runOauthPkceFlow OAuth 2.1 PKCE S256 (mock-AS or real-tenant)
5 runToolSchemaValidation inputSchema is valid JSON-Schema
6 runCapabilityIntrospection initialize.capabilities matches behaviour
7 runRoundtripSmoke One tools/call per advertised tool
8 runAnnotationsAudit readOnlyHint / destructiveHint hygiene
9 runFullSuite All suites + summary
10 generateReport Render JUnit / JSON / terminal
11 compareManifests Diff two tool manifests
12 assertNoBreakingChanges Diff two FullReports

Compatibility matrix

2024-11-05 2025-03-26 2025-06-18
jsonrpc yes yes yes
version (handshake) yes yes yes
transport (stdio) yes yes yes
transport (http) n/a yes yes
oauth (mock) n/a yes yes
oauth (real) n/a yes yes
schema yes yes yes
capability yes yes yes
smoke yes yes yes
annotations warn-only warn-only yes

yes = suite runs and produces actionable results. n/a = capability not in spec; suite skips automatically. warn-only = suite runs but the spec does not formally require the feature.

Integration in Factory builds

In every Factory build's package.json:

{
  "scripts": {
    "factory:conformance": "mcp-conformance run --target stdio --cmd 'node dist/server.js' --spec 2025-06-18 --suite full"
  }
}

In CI:

- run: npm run factory:conformance

Spec references

About StudioMeyer

StudioMeyer is an AI and design studio based in Palma de Mallorca, working with clients worldwide. We build custom websites and AI infrastructure for small and medium businesses. Production stack on Claude Agent SDK, MCP and n8n, with Sentry, Langfuse and LangGraph for observability and an in-house guard layer.

License

MIT — Copyright (c) 2026 Matthias Meyer (StudioMeyer)

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About MCP Protocol Conformance

How do I install MCP Protocol Conformance?

Run claude mcp add protocol-conformance -- npx -y mcp-protocol-conformance, then add the server to your MCP client's configuration.

Is MCP Protocol Conformance safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is MCP Protocol Conformance still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.