Observed MCP server

whats-loaded-mcp

Shows what is consuming your agent context window before a session starts: always-loaded skill descriptions ranked by token cost, skills installed more than once under different names, CLAUDE.md/AGENTS.md sizes including what their @import lines pull in, and MCP servers configured across clients. Read-only: no child processes, no network.

Security score

—/100

Awaiting a completed comparable scan.

Seven-category assessment pending: authentication, tool poisoning, prompt injection, dangerous capabilities, dependency risk, data exfiltration, and transport security.

Score history

Pending

Immutable methodology-versioned snapshots

Schema drift

Pending

No normalized tool schema observed

Fingerprint

Pending

Repository/package-backed identity

Public findings

No public findings recorded

This is not a safety claim. Check the coverage and revision status before relying on absence of findings.