Back to Browse

Tesults MCP Server

Developer ToolsModerate5.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Ask your AI agent why your tests are failing. Instant analysis on failures and regressions.

About

Ask your AI agent why your tests are failing. Instant analysis on failures and regressions.

Security Report

5.7
Moderate5.7Moderate Risk

The Tesults MCP server is a focused client for the Tesults API. It sends its bearer token only to the hardcoded host www.tesults.com, encodes path and query parameters, enforces timeouts and response size limits, and sanitizes error messages. The main concerns are that create_target and regenerate_token return live API tokens into the AI model's context, and that destructive tools such as delete_target are available unless read-only mode is enabled. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

4 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

Tesults API token - obtain from your Tesults project configurationRequired

Environment variable: TESULTS_API_TOKEN

Set to true for reporting-only mode: only the reporting and insight tools are exposed and non-GET API requests are blocked locallyOptional

Environment variable: TESULTS_READ_ONLY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-tesults-tesults-mcp": {
      "env": {
        "TESULTS_API_TOKEN": "your-tesults-api-token-here",
        "TESULTS_READ_ONLY": "your-tesults-read-only-here"
      },
      "args": [
        "-y",
        "tesults-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

tesults-mcp

Tesults MCP server. Connect AI agents and MCP-compatible tools to your Tesults test results, insights, and targets.

Documentation

Full setup and usage documentation: https://www.tesults.com/docs/api/mcp

Quick start

claude mcp add tesults-mcp npx tesults-mcp -e TESULTS_API_TOKEN=your-api-token

Reporting-only mode

Set TESULTS_READ_ONLY=true in the MCP server's environment alongside TESULTS_API_TOKEN. This exposes only the seven reporting and insight tools. Target creation, editing, deletion and token regeneration are not registered, and non-GET API requests are blocked locally.

Existing configurations remain unchanged when this setting is omitted or false. This is a restriction in this MCP server, not a reduction in the API token's permissions. Keep the token private. Insight tools can still generate and cache AI analyses on the server; they do not change your test results or targets.

Requests time out after 60 seconds and responses are limited to 10 MiB. For large result sets, request fewer runs or use cases=false for summaries. API failures are returned as tool errors, not successful answers.

These options apply to this source version and require an updated installation once released. They do not change an already installed published package.

Offline checks

Run node --test tests/hardening.test.js. Tests do not call Tesults or use a real token.

License

MIT

Reviews

No reviews yet

Be the first to review this server!