io.github.JcJamet
io.github.JcJamet/ia-qa-toolbox
VOUCH56·D130+ QA & dev tools for AI agents: prompt injection, RAG testing, VLM eval, guardrails. Free.
Trust report
Scanned 2026-07-31 · MCP 2025-11-25Scored by MCP Vouch against the OWASP MCP Top 10. SKIP applies to HTTP-only checks not relevant for stdio servers and is excluded from the score.
- FAILMCP01Tool Poisoning0 / 10
- WARNMCP02Insufficient Input Validation5 / 10
- SKIPMCP03Resource Injection—
- WARNMCP04Unauthorized Capability Exposure4 / 10
- WARNMCP05Missing Authentication5 / 10
- PASSMCP06Insecure Transport10 / 10
- PASSMCP07Shadow Tool Registration10 / 10
- WARNMCP08Lack of Audit and Telemetry5 / 10
- WARNMCP09Inadequate Rate Limiting5 / 10
- WARNMCP10Supply Chain Risk6 / 10
Is io.github.JcJamet/ia-qa-toolbox safe to use?
io.github.JcJamet/ia-qa-toolbox scores 56/100 — grade D, which fails several checks against the Top 10. It passes 2 of the 9 OWASP MCP Top-10 checks that apply to it. The failures are Tool Poisoning. 1 further check does not apply to this server's transport and is excluded from the score entirely — skipped is not the same as failed. This is what the scanner found on 2026-07-31, not a guarantee. Re-run it yourself with `npx mcpr scan`.
What a grade D means, the ten checks behind it, and the point maths are all on how we score MCP server trust.
Slug
mcpr-io-github-jcjamet-ia-qa-toolbox
License
Unspecified
Quality score
Not yet probed
Trust score
VOUCH56·D
Latest version
1.0.0
Published
2026-05-26
Homepage
—
Repository
Capabilities
Not yet declared in the manifest.
Embed the live badge
Always reflects the current grade. Score drops → badge drops. No vanity lock.
[](https://mcp-registry-dh5.pages.dev/servers/mcpr-io-github-jcjamet-ia-qa-toolbox/)
Install
One-click cross-client install (Claude Code, Claude Desktop, Cursor, Windsurf) coming soon. The registry will write the correct config fragment to the correct file — no copy-paste.
Frequently asked questions
- Is io.github.JcJamet/ia-qa-toolbox safe to use?
- io.github.JcJamet/ia-qa-toolbox scores 56/100 — grade D, which fails several checks against the Top 10. It passes 2 of the 9 OWASP MCP Top-10 checks that apply to it. The failures are Tool Poisoning. 1 further check does not apply to this server's transport and is excluded from the score entirely — skipped is not the same as failed. This is what the scanner found on 2026-07-31, not a guarantee. Re-run it yourself with `npx mcpr scan`.
- What is the io.github.JcJamet/ia-qa-toolbox trust score based on?
- Ten checks derived from the OWASP MCP Top 10, run against the live server by the open-source MCP Vouch scanner. Applicable checks are summed and scaled to 0–100; checks that do not apply to the server's transport are skipped and leave the denominator entirely.
- Why did io.github.JcJamet/ia-qa-toolbox not score higher?
- It failed 1 of the 9 checks that apply to it: Tool Poisoning. Each failure is listed with its verdict in the trust report on this page.
- How do I install io.github.JcJamet/ia-qa-toolbox?
- io.github.JcJamet/ia-qa-toolbox is installed like any other MCP server — add it to your client's MCP configuration. Cross-client one-click install is coming to MCP Registry; until then, the repository and homepage links on this page carry the maintainer's own instructions.