Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / BugTape demo
BugTape demo
by bugtape.ai · https://app.bugtape.ai/demo/mcp
Read-only sample shop with captured bug evidence. No account or key needed.
13 of 13 checks · 27 Oct 2026
Is BugTape demo MCP server safe?
- No hidden instructions were found in its tool descriptions.
- Its error messages showed no secrets or internal details.
- All 14 of its tools are labeled read-only.
- Overall it scored 85/100 on 27 Oct 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
14 tools, in the server's own words.
list_bugsread-onlyList bugs for the organization (flat, one row per deduplicated report).
get_bugread-onlyGet full details of a bug including title, description, severity, status, reporters, AI summary, environment info, report count, affected_user_count, repeat_us…
get_bug_eventsread-onlyGet session events for a bug (DOM, network, console, clicks, errors).
get_repro_contextread-onlyBuild an agent-consumable reproduction pack: evidence (timeline, status, env) separate from inference (AI summary).
list_projectsread-onlyList all projects in the organization with their bug counts.
get_project_statsread-onlyGet aggregate statistics for a project (server-computed over bugs in the elected delivery feed, not a sample): counts by status and severity, daily timeline, t…
get_bug_occurrencesread-onlyList the individual occurrences grouped under a bug.
get_bug_usersread-onlyWho hit this bug: one row per affected end user (the app's identify() userId, else reporter email, else an anonymous IP-hash key) with firstSeen, lastSeen, occ…
get_live_occurrencesread-onlyGet the most recent occurrences across the organization.
get_current_orgread-onlyReturn the credential workspace.
get_bug_historyread-onlyGet the full audit trail of status/severity changes and assignments on a bug, including who changed what and when.
get_similar_bugsread-onlyFind other bugs similar to the given bug, ranked by similarity score (0-100, fingerprint + title overlap).
list_bug_groupsread-onlyGrouped triage view: bugs collapsed across pages by error signature (one group per distinct error within a project, even when dedup created many bug rows).
list_recommended_criticalread-onlyStart here.
Test results
Safe mode: only tools labeled read-only were run. How the test works
- !Ready for the newest MCP versionnote
1 warning
- !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
- !Every tool is describednote
1 warning
- !list_recommended_critical: Inputs with no description: projectId, limit
- !Follows MCP best practices (not scored yet)note
1 tip (not scored)
- !6 tools answer with structured data but don't declare its shape (outputSchema): list_bugs, list_projects, get_live_occurrences, get_current_org, list_bug_groups, list_recommended_critical. If those answers change shape, nothing can catch it
- !Resources and prompts worknote
5 warnings (5 templates)
- !bugtape://bugs/{bugId}/status: A made-up value (bugtape://bugs/qamcp-test/status) gets an internal error instead of a clean "not found": INVALID_INPUT_SYNTAX: Malformed identifier in request
- !bugtape://bugs/{bugId}: A made-up value (bugtape://bugs/qamcp-test) gets an internal error instead of a clean "not found": INVALID_INPUT_SYNTAX: Malformed identifier in request
- !bugtape://projects/{projectId}/inbox: A made-up value (bugtape://projects/qamcp-test/inbox) gets an internal error instead of a clean "not found": VALIDATION_ERROR: projectId must be a valid UUID
- !bugtape://bugs/{bugId}/repro: A made-up value (bugtape://bugs/qamcp-test/repro) gets an internal error instead of a clean "not found": [ { "validation": "uuid", "code": "invalid_string", "message": "Invalid uuid", "path": [] } ]
- !bugtape://bugs/{bugId}/occurrences/{occurrenceId}/repro: A made-up value (bugtape://bugs/qamcp-test/occurrences/qamcp-test/repro) gets an internal error instead of a clean "not found": [ { "validation": "uuid", "code": "invalid_string", "message": "Invalid uuid", "path": [] } ]
- and 1 more
- ✓ConnectsConnected in 805 mspass
- ✓Lists its toolsFound 14 toolspass
- ✓Tools are labeled safe or dangerousEvery tool has a safety labelpass
- ✓No hidden instructionsNo hidden instructions found in tool descriptionspass
- ✓Tools work with good inputspass
All good
- ✓list_bugs: Worked (577 ms)
- ✓get_bug: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_bug: Invalid uuid at bugId
- ✓get_bug_events: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_bug_events: Invalid uuid at bugId
- ✓get_repro_context: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_repro_context: Invalid uuid at bugId
- ✓list_projects: Worked (240 ms)
- ✓get_project_stats: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_project_stats: Invalid uuid at projectId
- ✓get_bug_occurrences: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_bug_occurrences: Invalid uuid at bugId
- ✓get_bug_users: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_bug_users: Invalid uuid at bugId
- and 6 more
- ✓Bad inputs give a clean errorpass
All good
- ✓list_bugs: Refused wrong type for "status" with a clear error
- ✓get_bug: Refused missing required input "bugId" with a clear error
- ✓get_bug: Refused wrong type for "bugId" with a clear error
- ✓get_bug_events: Refused missing required input "bugId" with a clear error
- ✓get_bug_events: Refused wrong type for "bugId" with a clear error
- ✓get_repro_context: Refused missing required input "bugId" with a clear error
- ✓get_repro_context: Refused wrong type for "bugId" with a clear error
- ✓get_project_stats: Refused missing required input "projectId" with a clear error
- and 12 more
- ✓Tools work togetherpass
5 chains working
- ✓list_bugs → get_project_stats: get_project_stats found what list_bugs returned (projectId = "d3e00000-0000-4000-8000-000000000002")
- ✓list_bugs → list_bug_groups: list_bug_groups found what list_bugs returned (projectId = "d3e00000-0000-4000-8000-000000000002")
- ✓list_bugs → list_recommended_critical: list_recommended_critical found what list_bugs returned (projectId = "d3e00000-0000-4000-8000-000000000002")
- ✓get_live_occurrences → list_bugs: list_bugs found what get_live_occurrences returned (projectId = "d3e00000-0000-4000-8000-000000000002")
- ✓get_live_occurrences → get_bug: get_bug found what get_live_occurrences returned (bugId = "982110c2-9156-4e16-a2da-3efa33893fad")
- ✓Fast enoughpass
All good
- ✓Connecting took 805 ms
- ✓Listing tools took 230 ms
- ✓Average tool answer: 263 ms
- ✓list_bugs: Slowest tool: list_bugs (577 ms)
- ✓No secrets leakedChecked 33 error messages: no secrets or internal detailspass
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://app.bugtape.ai/demo/mcpScore over time
- 27 Oct 202685
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use BugTape demo, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and show a "Tested by QAmcp" badge. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works