passmcp-graph demo
Which agents reach which servers
passmcp-graph 0.0.8's published fixture graph, exported with passmcp-graph dashboard --share-safe --format json and built into this page by SSG.
Share-safe Endpoints, identities and configuration paths are placeholders written by passmcp-graph's share-safe profile.
Look at first: crm failed a critical check in its latest attestation
claude-desktop is configured to reach it. Evidence age: 23 days; stale after 30. Rule: auth.unauthenticated_tools.
Clients, servers and their status
Configured clients
- claude-desktop4 tool paths, 3 servers
- cursor2 tool paths, 2 servers
4MCP servers
MCP servers
- crmhttp-server-1, Critical findings41.5
- stdio-server-2stdio-server-2, No evidenceNo score
- mailhttp-server-3, Stale evidence88
- fileshttp-server-4, No failing server checks95
Key figures
- Configured tool paths
- 6client -> server -> tool paths derived from configuration; not observed calls
- Paths to potentially destructive tools
- 66.7%paths whose tool declares destructiveHint true, or is not declared read-only and declares no destructiveHint (the MCP default)
- Servers with evidence
- 75%servers with at least one attestation, whatever its age
- Mean score of scored servers
- 74.8Out of 100, over the 3 of 4 servers with a score
Findings
4 open: findings, then evidence gaps
| Finding | Path | Severity | Evidence age |
|---|---|---|---|
| A critical check failed on crm, inherited by claude-desktop | claude-desktop -> http-server-1 | Critical | 23 days |
| Identity identity-1 holds more than files's tools need | identity-1 -> http-server-4 | Medium | 22 days |
| No attestation loaded for stdio-server-2 | claude-desktop -> stdio-server-2 | Low | Not supplied |
| Evidence for mail is 61 days old | claude-desktop, cursor -> mail | Low | 61 days |
Next queries
The passmcp-graph query that shows each item's evidence
- A critical check failed on crm, inherited by claude-desktop
passmcp-graph query "agents -> servers where critical" - Identity identity-1 holds more than files's tools need
passmcp-graph query "identities -> servers where scopes contains 'admin'" - No attestation loaded for stdio-server-2
passmcp-graph query "agents -> servers where not attested" - Evidence for mail is 61 days old
passmcp-graph query "agents -> servers where attestation_age_days > 30"
MCP servers
4 configured, scored from their attestations
| Server | Endpoint | Transport | Reached by | Tools | Evidence age | Status | Score |
|---|---|---|---|---|---|---|---|
| crm | http-server-1 | http | claude-desktop | 2 | 23 days | Critical findings | 41.5 |
| stdio-server-2 | stdio-server-2 | stdio | claude-desktop | 1 | Not supplied | No evidence | No score |
http-server-3 | http | claude-desktop, cursor | 1 | 61 days | Stale evidence | 88 | |
| files | http-server-4 | http | cursor | 1 | 22 days | No failing server checks | 95 |