Mcpward is listed as Open Source. Check https://github.com/TsvetanG2/mcpward for the current plan limits, as vendors change pricing frequently.

Mcpward

Q: What is Mcpward?

Mcpward is a code AI tool listed on Use AI Tools. Mcpward is contract and security testing for MCP servers, in CI. It snapshots an MCP server contract and fails the build when it changes underneath you, catching schema drift, silently changed tool descriptions, protocol violations and tool-poisoning patterns.

Q: What is Mcpward best for?

Mcpward is commonly used for Testing third-party MCP servers in CI, Catching a rug-pull before it ships, Reporting MCP drift as a pull-request comment. It supports English.

Code⚡ Advanced✅ Global access

Testing third-party MCP servers in CICatching a rug-pull before it shipsReporting MCP drift as a pull-request comment

Open SourceEnglish

Mcpward is contract and security testing for MCP servers, in CI. It snapshots an MCP server contract and fails the build when it changes underneath you, catching schema drift, silently changed tool descriptions, protocol violations and tool-poisoning patterns.

Visit Website Compare

Community Rating

Be the first to rate Mcpward. Your feedback helps other users decide.

🎯 Real-World Use Cases

Pin the contract

Run mcpward baseline to capture tools into mcpward.lock.json and commit it, refreshing it only deliberately.

Fail on drift

Run mcpward diff in CI to catch schema drift, a readOnlyHint flip or a breaking schema change.

Report it

Results go to console, JSON, JUnit, SARIF or Markdown, and can be posted as a pull-request comment.

⚖️ Honest Review

✅ Pros

+Black-box, so it works against servers you did not write, over stdio or Streamable HTTP
+Runs entirely on your machine: no account, no API calls, no telemetry
+Works against MCP servers written in any language

⚠️ Cons

−Requires Node.js 22 or newer
−A CI job that re-baselines automatically would accept a rug-pull as the new contract

📚

Guides and comparisons about code tools

CodeOct 26, 2026