mcp-protocol-tester

[](https://github.com/whiteknightonhorse/mcp-protocol-tester/actions/workflows/security-audit.yml) [](https://github.com/whiteknightonhorse/mcp-protocol-tester/actions/workflows/ci.yml) [](https://opensource.org/licenses/MIT) [](https://nodejs.org) [](https://github.com/whiteknightonhorse/mcp-protocol-tester/actions/workflows/security-audit.yml) [](https://github.com/whiteknightonhorse/mcp-protocol-tester/actions/workflows/security-audit.yml)

Universal test suite for MCP servers with dual-rail payment testing.

Tests x402 (USDC on Base) and MPP (USDC on Tempo) protocols simultaneously across all tools on any MCP-compatible server.

• 15-phase test suite — discovery through security audit to load testing
• Dual-rail payment testing — x402 + MPP in parallel
• Full MCP protocol validation — initialize, tools/list, tools/call
• 402 challenge validation — every tool returns correct payment challenge
• Payment security — replay attacks, race conditions, double-spend, amount manipulation
• Advanced security — SSRF, timing attacks, CORS, header injection, fuzz testing
• Resilience testing — brute force, SSL/TLS, enumeration, error cascade
• Load testing — configurable concurrency, parallel protocol stress
• Provider health map — per-provider status and latency tracking
• Universal — works with ANY MCP server, not just APIbase
• Scoring — 0-100 score with A+/A/B/C/D/F g