MCP servers are becoming production dependencies.
If an agent depends on a server, that server needs the same basic safety net as any other production integration: CI checks, security review, regression reports, and artifacts that teams can inspect when behavior changes.
MCP Observatory helps teams test, secure, and monitor MCP servers before agents depend on them.
It can:
The open source CLI and MCP server remain free for local OSS use under MIT.
For teams running MCP in private repos or production workflows, paid pilots are available for hosted reporting, private repo CI history, security reports, production monitoring, certification, support, and fleet visibility.
npx @kryptosai/mcp-observatory@latest
Deep scan:
npx @kryptosai/mcp-observatory@latest scan deep --security
Running MCP in production? Contact william@banksey.com.
source & further reading
dev.to — original article
Prompt Injection as a Control/Data Boundary Problem
Australian Cyber Security Centre Issues Alert on Mass Exploitation of CMS Vulnerabilities
Malicious 'jscrambler' NPM Package Versions Deploy Cross-Platform Infostealer in Sophisticated Supply Chain Attack