Test certificate: buggy-test-serverhttp://127.0.0.1:4310/mcp

Server

buggy-test-server 0.0.1

MCP version

2025-11-25 · streamable HTTP

Tested

2026-10-16 · 18:10 UTC

Safety mode

Only tools labeled read-only were run

Logged in

Tester

QAmcp 0.1.8

Result

38/ 100

FAIL

10 of 10 checks · 5 of 9 tools run

Failures: fix these first 6

T-4.2

slow_report: Has no description, so the AI has to guess what it does

T-6.1

fetch_notes: Description contains hidden <IMPORTANT> block. This is a known trick to make AI do things the user didn't ask for.

T-7.4

slow_report: No answer within the time limit

T-8.7

slow_report: Hung on missing required input "id"

T-10.1

search_users: Error message shows what looks like a database password in a link

T-8.8

slow_report: Hung on wrong type for "id"

Advisories: worth fixing 10

T-5.1

4 of 9 tools have no safety label (read-only or dangerous): list_projects, team_digest, get_or_create_user, delete_account

T-9.4

search_users: Slowest tool: search_users (3.0 s): users will notice the wait

T-4.1

search_users: Inputs with no description: name

T-5.2

delete_account: Name sounds like it deletes something, but it is not labeled dangerous

T-7.3

fetch_notes: Answered, but it gives the exact same answer to bad input as to good input, so it may be ignoring what it is sent

T-8.5

fetch_notes: Accepted missing required input "key" without complaining

and 4 more in the test items below

All test items

Open an item to see every result behind it.

T-1ConnectsConnected in 76 msPASS

T-1.1

Connected in 76 ms

T-2Ready for the newest MCP versionUses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.ADVISORY

T-2.1

Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.

T-3Lists its toolsFound 9 toolsPASS

T-3.1

Found 9 tools

T-4Every tool is describedslow_report: Has no description, so the AI has to guess what it doesFAIL

T-4.1

search_users: Inputs with no description: name

T-4.2

slow_report: Has no description, so the AI has to guess what it does

T-5Tools are labeled safe or dangerous4 of 9 tools have no safety label (read-only or dangerous): list_projects, team_digest, get_or_create_user, delete_accountADVISORY

T-5.1

4 of 9 tools have no safety label (read-only or dangerous): list_projects, team_digest, get_or_create_user, delete_account

T-5.2

delete_account: Name sounds like it deletes something, but it is not labeled dangerous

T-6No hidden instructionsfetch_notes: Description contains hidden <IMPORTANT> block. This is a known trick to make AI do things the user didn't ask for.FAIL

T-6.1

fetch_notes: Description contains hidden <IMPORTANT> block. This is a known trick to make AI do things the user didn't ask for.

T-7Tools work with good inputsslow_report: No answer within the time limitFAIL

T-7.1

get_weather: Worked (13 ms)

T-7.2

search_users: Worked (3.0 s)

T-7.3

fetch_notes: Answered, but it gives the exact same answer to bad input as to good input, so it may be ignoring what it is sent

T-7.4

slow_report: No answer within the time limit

T-7.5

strict_lookup: Worked (12 ms)

T-7.6

list_projects: Not run: no safety label (if you own this server, test again in owner mode)

T-7.7

team_digest: Not run: no safety label (if you own this server, test again in owner mode)

T-7.8

get_or_create_user: Not run: no safety label (if you own this server, test again in owner mode)

T-7.9

delete_account: Not run: name sounds like it deletes something

T-8Bad inputs give a clean errorslow_report: Hung on missing required input "id"FAIL

T-8.1

get_weather: Refused missing required input "city" with a clear error

T-8.2

get_weather: Refused wrong type for "city" with a clear error

T-8.3

search_users: Refused missing required input "name" with a clear error

T-8.4

search_users: Refused wrong type for "name" with a clear error

T-8.5

fetch_notes: Accepted missing required input "key" without complaining

T-8.6

fetch_notes: Accepted wrong type for "key" without complaining

T-8.7

slow_report: Hung on missing required input "id"

T-8.8

slow_report: Hung on wrong type for "id"

T-8.9

strict_lookup: Refused missing required input "code" with a clear error

T-8.10

strict_lookup: Refused wrong type for "code" with a clear error

T-8.11

Errors are sent with an HTTP error status (like 400) instead of a normal MCP reply, so some AI apps may treat them as crashes: strict_lookup

T-9Fast enoughsearch_users: Slowest tool: search_users (3.0 s): users will notice the waitADVISORY

T-9.1

Connecting took 76 ms

T-9.2

Listing tools took 11 ms

T-9.3

Average tool answer: 763 ms

T-9.4

search_users: Slowest tool: search_users (3.0 s): users will notice the wait

T-10No secrets leakedsearch_users: Error message shows what looks like a database password in a linkFAIL

T-10.1

search_users: Error message shows what looks like a database password in a link

T-10.2

search_users: Error message shows internal details: code stack trace, server file path

Tools not run, and why

QAmcp never runs a tool that could change something on your server. If you own it, --owner runs the unlabeled tools whose names clearly only read.

list_projectsno safety label (if you own this server, test again in owner mode)
team_digestno safety label (if you own this server, test again in owner mode)
get_or_create_userno safety label (if you own this server, test again in owner mode)
delete_accountname sounds like it deletes something