Thirteen demonstration tools discovered
The server exposed 13 tools including echo, get-sum, get-tiny-image, trigger-long-running-operation, simulate-research-query, and get-env.
evidence/trust5/2026-06-13-mcp-pilot.json
MCP serverPublished
MCP Everything Reference Server
The Everything reference server passed a real MCP smoke test: it discovered 13 tools and returned correct results for an echo and a numeric sum. The score is solid for protocol conformance, with caution because this is an explicit feature-demonstration server — including an environment-dump tool — and is not meant for production deployment.
Independent trust badge
The visible trust mark for this verdict.
Badge clicks resolve to this canonical verdict so the score, test date, evidence, limitations, and reply status remain attached.
Embed
Show this badge on your site
[](https://silentcritique.com/verdicts/mcp-everything-reference)Markdown works in GitHub READMEs. The badge always links back to this verdict.
Editorial notice
This page reflects SilentCritique's independent editorial opinion based on the specific test evidence shown. It is not an allegation of unlawful, malicious, fraudulent, or bad-faith conduct. SilentCritique does not accept payment to remove criticism, change a score, suppress a verdict, or improve an outcome.
Claim tested
Can the public Everything MCP server expose its tool surface and return correct results for basic tool calls over MCP stdio?
Evaluator panel
Protocol harnessSafety reviewerOperator skeptic
Evidence reviewed
Echo returned the exact input
Calling echo with "SilentCritique Trust 5" returned "Echo: SilentCritique Trust 5".
evidence/trust5/2026-06-13-mcp-pilot.json
Arithmetic tool returned the correct sum
Calling get-sum with a=2 and b=3 returned "The sum of 2 and 3 is 5."
evidence/trust5/2026-06-13-mcp-pilot.json
Test setup
- Started @modelcontextprotocol/server-everything@2026.1.26 over MCP stdio using the official client SDK.
- Listed tools, called echo with a known string, and called get-sum with two numbers.
- Stored the full tool-call evidence in evidence/trust5/2026-06-13-mcp-pilot.json.
Strengths
- Tool discovery and basic tool calls behaved exactly as documented.
- Results were well-formed MCP content blocks with no malformed payloads.
- It is a useful, honest reference for exercising MCP client features.
Failure modes
- The get-env tool returns process environment values, which can leak secrets if a client runs it with sensitive variables set.
- This is a demonstration server, so its simulated logging, sampling, and long-running operations are not representative of real workloads.
- The test did not exercise the prompts, resources, or subscription features the server also advertises.
What would improve the score
- Gate or clearly label the get-env tool as a security demonstration only.
- Ship prominent warnings that this server is for development, not production.
- Add example client policies that disable sensitive tools by default.
Limitations
- This was an unsolicited smoke test of the public package, not a full security audit.
- Only local stdio operation on macOS was tested.
- The test exercised two tools out of the thirteen exposed.
Visible dissent
- The protocol harness scored this high because conformance was clean.
- The operator skeptic withheld points because an environment-dump tool in a sample server invites unsafe copy-paste deployments.
Right of reply
No vendor reply has been requested or published as of 2026-06-13. SilentCritique will publish factual corrections or a right of reply through the corrections process.
Methodology matters
Scores are only meaningful when the rubric, date, evidence, and dissent are visible.
Read methodology