instrument-mcp-server
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches updated SDK documentation from the vendor's official GitHub repository (
github.com/amplitude/Amplitude-MCP-Analytics-Node) to ensure current API usage. - [INDIRECT_PROMPT_INJECTION]: Ingests an optional
rationalefield from tool inputs provided by other AI agents and fetches remote documentation at runtime. These represent ingestion points for untrusted data, though therationaleis truncated to 1,000 characters before processing. - [COMMAND_EXECUTION]: Provides implementation patterns for instrumenting a Node.js server, which includes network communication with Amplitude's analytics API as part of its primary function.
Audit Metadata