PubFi MCP

Is PubFi MCP server safe?

• No hidden instructions were found in its tool descriptions.
• Its error messages showed no secrets or internal details.
• 2 of its 4 tools are labeled read-only; the others may change or send things.
• Overall it scored 94/100 on 26 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

4 tools, in the server's own words.

Test results

Safe mode: only tools labeled read-only were run. How the test works

• !
  Every tool is described

  3 warnings

  • !pubfi.capabilities.list: Inputs with no description: method
  • !pubfi.route.execute: Inputs with no description: method, idempotency_key, request_id
  • !pubfi.substrate.runtime_upgrade.verify: Inputs with no description: network, extrinsic_index, idempotency_key, request_id
  note
• ✓
  ConnectsConnected in 502 ms
  pass
• ✓
  Ready for the newest MCP versionUses the latest MCP version (2026-07-28)
  pass
• ✓
  Lists its toolsFound 4 tools
  pass
• ✓
  Tools are labeled safe or dangerousEvery tool has a safety label
  pass
• ✓
  No hidden instructionsNo hidden instructions found in tool descriptions
  pass
• ✓
  Tools work with good inputs

  All good

  • ✓pubfi.capabilities.list: Worked (185 ms)
  • ✓pubfi.capabilities.get: Answered with an error, probably because of our sample input: Capability not found
  • –pubfi.route.execute: Not run: labeled dangerous
  • –pubfi.substrate.runtime_upgrade.verify: Not run: labeled dangerous
  pass
• ✓
  Bad inputs give a clean error

  All good

  • ✓pubfi.capabilities.list: Refused wrong type for "cursor" with a clear error
  • ✓pubfi.capabilities.get: Refused missing required input "capability_id" with a clear error
  • ✓pubfi.capabilities.get: Refused wrong type for "capability_id" with a clear error
  pass
• ✓
  Tools work togetherpubfi.capabilities.list → pubfi.capabilities.get: pubfi.capabilities.get found what pubfi.capabilities.list returned (capability_id = "route-registered-f88531936b12914814edc1c2438c8988dc7faa7a9d…")
  pass
• ✓
  Fast enough

  All good

  • ✓Connecting took 502 ms
  • ✓Listing tools took 151 ms
  • ✓Average tool answer: 167 ms
  • ✓pubfi.capabilities.list: Slowest tool: pubfi.capabilities.list (185 ms)
  pass
• ✓
  No secrets leakedChecked 5 error messages: no secrets or internal details
  pass
• ✓
  Follows MCP best practices (not scored yet)Tool names, safety labels and tool list size follow the MCP guide
  pass
• ✓
  Resources and prompts work

  All good (24 resources)

  • ✓Opened 10 of 10 resources (a sample of 10 of 24)
  • ✓An address that does not exist gets a clean "not found" error
  pass

Test it yourself

Free and open source. Same checks, same score.

Score over time

• 26 Oct 202694

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use PubFi MCP, signed in with GitHub, one per person. Reviews never change the score.