MCP Inspector
A tool for debugging MCP servers that can connect to a local MCP service and inspect the list of exposed tools.
Timeline (last 90 days)
MCP Inspector can be launched via the mcp-dev command, allowing you to test the server separately before connecting it to Claude.
MCP Inspector (Anthropic's official debugging tool) once had a zero-click RCE vulnerability with a CVSS of 9.4, requesting localhost from inside the browser via DNS rebinding, and Inspector executed code directly without authentication or origin checks.
Past vulnerability cases: mcp-remote once passed the authorization URL provided by the server directly to the system shell (CVE-2025-6514, CVSS 9.6); the early MCP Inspector ran an unauthenticated proxy that could execute commands (CVE-2025-49596).
As of the time of recording, MCP Inspector and FastAgent have early support for Skills over MCP, OpenAI's plugins can import server skills as snapshots, but most mainstream Agent applications have not yet followed suit.
When newly installing MCP Inspector, you should confirm the version is 0.14.1 or higher, as older versions have a known security issue that has been patched.
In Sam Welland's demo, DCR generates a new application on the authorization server over and over again upon repeated disconnections and reconnections, whereas CIMD always reuses the same application.
All Facts (5)
MCP Inspector can be launched via the mcp-dev command, allowing you to test the server separately before connecting it to Claude.
50%UnverifiedMCP Inspector (Anthropic's official debugging tool) once had a zero-click RCE vulnerability with a CVSS of 9.4, requesting localhost from inside the browser via DNS rebinding, and Inspector executed code directly without authentication or origin checks.
50%UnverifiedPast vulnerability cases: mcp-remote once passed the authorization URL provided by the server directly to the system shell (CVE-2025-6514, CVSS 9.6); the early MCP Inspector ran an unauthenticated proxy that could execute commands (CVE-2025-49596).
50%UnverifiedWhen newly installing MCP Inspector, you should confirm the version is 0.14.1 or higher, as older versions have a known security issue that has been patched.
50%UnverifiedIn Sam Welland's demo, DCR generates a new application on the authorization server over and over again upon repeated disconnections and reconnections, whereas CIMD always reuses the same application.
50%