harness-mcp-scan

Calls harness mcp-scan to enumerate every declared MCP server + tool and flag policy / permission / dependency issues. Never executes any tool; pure static analysis.

Algorithm

Implementation: scripts/mcp-scan.mjs.

1. Shell npx -p metaharness@latest harness mcp-scan <path> --json.
2. Parse findings[] with { severity, id, server, tool, message }.
3. --fail-on <severity>: exit 1 when any finding is at or above that level. Default high.
4. Output JSON (default) or markdown table.

Severity rank