Behavioral Audit Registry for MCP Servers

Static scanners read tool descriptions.
mcp-behave watches behavior — and now you can browse the results.

pip install mcp-behave

How mcp-behave Works

1. Launch & Trace

Runs the MCP server under strace, exercising every tool, resource, and prompt it advertises. Captures syscalls at the kernel level.

2. Compare & Detect

Compares the declared manifest against actual runtime behavior. Detects undeclared network egress, sensitive file access, and manifest rug-pulls between runs.

3. Report & Enforce

Outputs structured findings with severity levels. Use --json --fail-on high in CI to enforce behavioral policies automatically.