{"version":1,"type":"story","url":"https://digestai.news/story/researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati","json":"https://digestai.news/story/researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati.json","markdown":"https://digestai.news/story/researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati.md","slug":"researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati","headline":"Researchers release MCPGuard to audit MCP SDKs for missing specification rules","summary":"Researchers introduced **MCPGuard**, an automated framework that detects gaps between the **Model Context Protocol (MCP)** specifications and its official SDK implementations. The tool uses two tracks: a *structural* one that compares JSON Schema constraints with normalized SDK models, and a *behavioral* one that extracts normative prose rules, slices function-level code, and audits them with large language models for potential omissions. A dynamic adjudicator then validates candidate findings against full source code and generates proof-of-concept examples to confirm them.\n\nMCPGuard was tested on the official **Python 1.26.0** and **TypeScript 1.29.0** SDKs, uncovering **13 and 19 conformance gaps**, respectively. These gaps were not detected by existing black-box baseline tools. The researchers also found that such omissions can propagate downstream to applications using MCP servers, emphasizing the need for SDK-level testing beyond endpoint validation.","keyPoints":["MCPGuard combines structural and behavioral analysis to audit MCP SDKs for specification gaps","Found 13 gaps in Python 1.26.0 SDK and 19 in TypeScript 1.29.0, none detected by prior tools","Gaps can propagate to downstream applications using MCP servers, per test results"],"whyItMatters":"MCPGuard fills a critical gap in ensuring SDKs adhere to protocol specifications, reducing risks of misaligned tool integrations in AI agent workflows.","category":{"slug":"research","name":"Research","url":"https://digestai.news/category/research"},"entities":{"companies":[],"models":[],"people":[]},"firstPublishedAt":"2026-11-04T05:00:00Z","updatedAt":"2026-11-04T05:00:00Z","sourceCount":1,"hasPrimarySource":true,"sources":[{"outlet":"arXiv cs.AI","title":"MCPGuard: Finding Conformance Gaps in MCP SDKs via Dual-Track Analysis and Dynamic Adjudication","url":"https://arxiv.org/abs/2611.03662","publishedAt":"2026-11-04T05:00:00Z","type":"primary","primary":true,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"Researchers release MCPGuard to audit MCP SDKs for missing specification rules\", 4 November 2026, https://digestai.news/story/researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati","publisher":"Digest AI","title":"Researchers release MCPGuard to audit MCP SDKs for missing specification rules","datePublished":"2026-11-04T05:00:00Z","url":"https://digestai.news/story/researchers-release-mcpguard-to-audit-mcp-sdks-for-missing-specificati"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}