Jarroba Tools · Test audit runs on your own machine — the client starts it, so there is no endpoint to ping. 611 installs a week from npm. Last commit 26 Oct 2026.
Audits tests instead of writing them: what each one really asserts. 4 tools, local.
What the code does
We read the source, 6 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
пакет @jarroba/mcp-tests ссылается на invarato/jarrobatools
const PARAM_SENSIBLE = /ssh|id_rsa|id_ed25519|passwd|shadow|credential|secret|token|api_?key|private_?key|\benv\b|_env_|mcp_?json|aws/i;
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add jarroba-tools-tests -- npx -y @jarroba/mcp-tests{
"mcpServers": {
"jarroba-tools-tests": {
"command": "npx",
"args": [
"-y",
"@jarroba/mcp-tests"
]
}
}
}[mcp_servers.jarroba-tools-tests]
command = "npx"
args = ["-y", "@jarroba/mcp-tests"]{
"mcpServers": {
"jarroba-tools-tests": {
"command": "npx",
"args": [
"-y",
"@jarroba/mcp-tests"
]
}
}
}{
"servers": {
"jarroba-tools-tests": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@jarroba/mcp-tests"
]
}
}
}Optional settings from the registry entry, left out of the block above:
JARROBA_MCP_DOMAINS (Which tool domains to publish, comma-separated. Defaults to what this package is for. Valid: core, calc, diagram, kg, db, ai, logs, queue, project, tests, api, chip, chem, access, archsim, security, experiments, payroll. Fewer domains means less of your context window spent on tool definitions).
Alternatives to Jarroba Tools · Test audit
same job, measured the same wayRead-only tools that check whether code, and the tests that claim it works, are real.
Audit local test structure using aggregate assertions without returning test names, paths, or...
Read-only MCP server: a coding agent reads test sessions recorded in QA Wrap. Local only.
Read a draft post the way its audience and its ranking system will: fold test, hook audit,...
Read-only VMware vCenter/ESXi monitoring, 33 MCP tools; vSphere calls allowlist-gated in tests.
BYOK, fully local AI agent that tests your app/API and writes a real Playwright spec on success.
Read-only tools for agency testimonial walls: list clients, testimonials, and embed widgets.
Read-only lookup of tested agent tools and MCP servers: scores, test evidence, deprecation.
Jarroba Tools · Test audit — questions
Answers built from our own checks of this server.