Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP …
{
"mcpServers": {
"polygraphsolitmus": {
"command": "npx",
"args": [
"-y",
"@polygraphso/litmus"
]
}
}
}