Eclipse Health Check MCP
Scan an MCP server or agent configuration for security posture — evidence-bound findings, decomposed score, fixes.
status: in-developmentclass: mcpSecurityAudits
Vendor: Cyan Eclipse Technologies
What it does
- Static security scan of a local MCP server directory or agent configuration (file or inline object): 23 checks in 7 categories (auth, secrets, SSRF, dangerous tool surfaces, transport, dependencies, runtime)
- Evidence-bound findings: every finding cites the exact file and line (or json_path for config findings) and the snippet that triggered it, with severity and fix text bound to the check definition — never free-generated
- A decomposed score: the overall score is a weighted mean of per-category scores and is never emitted without its decomposition — a clean scan is a full 23-check report shape, not an absence of findings
- Checks that static evidence cannot decide report NOT_STATICALLY_DECIDABLE with the reason, never a silent pass
- Safe by construction: targets are read only — never executed, imported, or probed; no network; credential values are masked in emitted snippets (bench-verified at N2, run 3)
Tools
health_scan · health_scan_config · health_checks_list · health_explain_check
Platforms
- MCP over stdio (static local targets only; no live probing, no network)
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 21 pass, 1 na of 22 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/healthcheck.py. Runs 1–2 FAILED retained append-only; run 3 is the standing card — B-HC-1 (credential masking not global, HIGH) and B-HC-2 (-32603 escapes on the tool surface, HIGH) fixed and verified pass at N2/H3. N-CHECK: NOVELTY_PROVEN — evidence-bound findings whose file+line citations the bench opened and verified verbatim, severity/fix byte-bound to the check catalog, NOT_STATICALLY_DECIDABLE as a first-class result, and a score never emitted without its decomposition.
Not tested:
- Live probing / runtime posture — no live probing exists in this tier by design; runtime checks (HC-AUTH-03 / SSRF-02 / SSRF-03 / RUN-01 / RUN-02) are certified only as enumerated NOT_STATICALLY_DECIDABLE with reasons, never as passes
- Hosted / multi-tenant operation — NOT built; local stdio only
- Residual LOW backlog from the standing card: B-HC-3 (a target root that is itself a symlink is followed — caller's explicit target; disclose resolved-root behaviour in v0.2), B-HC-4 (absence/config evidence uses line=0 + json_path — the file+line claim should carve this out explicitly), B-HC-6 (malformed-JSON envelope handling at the transport layer)
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-health-check-mcp-2026-10-26-3.json
Pricing
Free local v0.1 (authority builder; dogfoods on CETech's own servers first)
Install / verify
docker run -i ghcr.io/cyan-eclipse-technologies-llc/eclipse-health-check-mcp:latest
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).