MCP CLI
Interactive CLI inspector for MCP servers supporting OAuth, tool calls, resource reads, and prompt runs.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-28
MCP CLI is a community-developed debugging tool for inspecting MCP servers interactively. Maintained by wong2, a solo developer with reasonable GitHub activity, it provides a CLI interface for testing tool calls, resource reads, and OAuth flows. The tool is distributed via npm with standard installation through npx, offering decent supply chain hygiene. Permissions are relatively scoped as it acts as an inspector rather than executing arbitrary operations itself, though it can trigger whatever capabilities the target MCP server exposes. The repository is open source with adequate documentation and examples. Main concerns centre on single-maintainer risk and the inherent trust required when inspecting potentially untrusted MCP servers. No security incidents are known. Suitable for developers debugging MCP implementations, but users should understand it will exercise whatever permissions the inspected server requests.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEGeneric shell. Reads local state.
Green flags
- Open source with clear repository and issue tracking
- Standard npm distribution with versioned releases
- Focused debugging use case with limited scope creep
- No known security incidents or malicious behaviour
- Active maintenance with recent commits
Red flags
- Single maintainer with potential bus factor risk
- Can trigger arbitrary capabilities of inspected MCP servers
- Limited community review compared to official tooling
- OAuth handling requires careful credential management
Permissions requested
Install
npx @wong2/mcp-cli
Review
Install this if you build or maintain MCP servers. It's the fastest way to test tools and resources without restarting your IDE or client. If you only consume servers, it won't add much to your workflow.
Good at
- Handles OAuth flows properly, which most CLI tools skip entirely.
- Interactive mode is fast for testing individual tools without restarting your client.
- Shows full JSON payloads, making it easier to debug schema mismatches.
- Works as a CI smoke test with sensible exit codes.
- No configuration needed. Point it at a server and it just runs.
Watch out
- No session saving or call chaining, so you can't script complex workflows easily.
- JSON-heavy output is accurate but hard to scan for quick checks.
- Requires Node 18 or later, which might not match your server's runtime.
- Interactive mode only. If you want batch testing, you'll write shell scripts around it.
Use cases
- MCP server debugging
- protocol testing
- tool call exploration
- CI smoke tests
Getting started
Works with
Similar MCPs
- GitHubFull GitHub API access - manage repos, issues, PRs, and code search. One of the most useful MCPs for any developer workflow.
- GrafanaGrafana Labs' official MCP. Read dashboards, datasources, alerts, and run Loki/Prometheus queries from inside your agent.
- SentryPull live errors, issues, and replays from Sentry into Claude. Great for debugging sessions where the model can see what actually broke in prod.
- GitLabGitLab's hosted MCP server, built into GitLab 18.6+. Manage MRs, browse repos, work with CI pipelines from Claude.