MCP servers › com.kongreviews › kongreviews
MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24
com.kongreviews/kongreviews
Pick a tech stack from a PRD and see what it costs now and at scale, after startup perks. — the publisher's description
Summary
com.kongreviews/kongreviews is a remote MCP server listed in the official MCP registry at version 0.2.0. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 26 tools, 1 resource and 0 prompts.
Record checks
1 of 2 record checks met · 7 do not apply
- met: Registry entry is active and says how to run it
- not met: Source repository link opens
- not applicable: Repository is not archived
- not applicable: Code pushed to the repository in the 90 days before our check
- not applicable: Repository publishes a security policy (SECURITY.md)
- not applicable: Package names its licence with a standard (SPDX) identifier
- not applicable: The version the registry lists can be installed and is not withdrawn
- not applicable: npm package carries build provenance (attestation)
- not applicable: No known critical or high advisory in the package or its dependencies
From public records, not a safety rating. Each check with its reason
Key facts
- Runs
- remote (hosted by the publisher)
- Transport
- streamable HTTP
- Sign-in
- none needed to open a session
- Tools
- 26
- Last tested
- 2026-10-24
Observed fact
This server accepted a session without any credential and lists 4 tools whose name or declaration suggests they change data (save_stack, update_saved_stack, delete_saved_stack, delete_account). That is our reading of the names; we did not call them. Source: our connection, 2026-10-24.
How fresh this is
- Live-tested
- yes, a real session (not a text-only review)
- Last tested
- 2026-10-24
- Mode
- read-only (no tool calls)
- Latest version
- 0.2.0, published 2026-10-23 (registry, as of the 2026-10-24 snapshot)
- First listed version
- 2026-10-23 (earliest version still in the registry; older removed versions would be earlier)
- Registry data
- snapshot 2026-10-24
- Package and repository
- checked 2026-10-24
- Engine
- mcp-runtime-engine@0.1.0 · sdk@1.32.0
Changes since the last refresh
New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 0.2.0 (published 2026-10-23).
Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.
What it is
What does this server offer?
Observed inventoryNone of its 26 tools are described as changing anything. For 26 the reading was uncertain, so no mark is shown.
- recommend_stackon 7 other servers
“Start here.”
Publisher declares: read-only yes · open-world yes
14 inputs, 1 required
descriptionstringrequired“Plain-language product description or PRD text.”mau_nownumber“Monthly active users now or at launch.”mau_forecastnumber“Monthly active users expected at the forecast horizon.”forecast_monthsintegerprofile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”app_typestring“Kind of app, from Product Hunt's categories: productivity, engineering_development, design_creative, finance, marketing_sales, data_analysis, platforms, no_cod…”budget_monthly_usdnumbercategoriesarray“Plan these categories.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”seatsinteger“Team members on per-seat plans.”founderobject“Optional company details used only to find startup perks.”task_intentstring“What the user is trying to do, in a few words, e.g.”output_destinationstring“Where the answer goes.”
- compare_architectures
“Asks the questions that decide an architecture (static or dynamic, who signs in, how much data, uploads and media, background jobs and live updates, data sensitivity, threat profile, cost of downtime…”
Publisher declares: read-only yes · open-world yes
15 inputs
descriptionstring“Plain-language product description or PRD text.”answersobject“Interview answers by question id, each an option id from compare_architectures, e.g.”requirementsarray“Requirements already confirmed; when given, the description is not read for requirements again.”platformsarray“Where the app runs.”mau_nownumbermau_forecastnumberforecast_monthsintegerapp_typestring“Kind of app, from Product Hunt's categories: productivity, engineering_development, design_creative, finance, marketing_sales, data_analysis, platforms, no_cod…”profile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”budget_monthly_usdnumbercategoriesarray“Categories to plan before the answers adjust them.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”founderobject“Optional company details used only to find startup perks.”task_intentstring“What the user is trying to do, in a few words, e.g.”output_destinationstring“Where the answer goes.”
- list_vendorson 11 other servers
“List vendors in the pricing catalogue, optionally for one category (hosting, database, auth, email, payments, observability, ai, edge, app_store, coding).”
Publisher declares: read-only yes · open-world no
1 input
categorystring
- list_capabilitieson 109 other servers
“List capability ids (features, compliance, regions) that requirements can reference, e.g.”
Publisher declares: read-only yes · open-world no
1 input
categorystring
- search_directoryon 14 other servers
“Search the directory of developer services (hosting, databases, auth, email, SMS, payments, analytics, monitoring, LLM APIs, vector databases, search, CMS and more): what each provider sells, its fre…”
Publisher declares: read-only yes · open-world no
7 inputs
querystring“Words to match, e.g.”idstring“Exact provider id, e.g.”categorystring“Directory category id, e.g.”statusstring“researched: prices read from the pricing page.”in_cost_engineboolean“true: only providers estimate_cost and plan_stack can price.”limitintegeroffsetinteger
- search_showcase
“Browse products startups have built and the stack each runs on: what it is, whether it is a website, a mobile app, both or a desktop app, its category and pricing, and every framework and service it …”
Publisher declares: read-only yes · open-world no
10 inputs
querystring“Words to match against names, taglines, makers and the stack, e.g.”idstring“Exact product id.”formstring“How it ships.”platformstring“Runs on this platform, whatever else it runs on.”categorystringtechstring“A tech key from facets.tech: a directory id such as "supabase", or a framework such as "next-js".”pricingstringsortstring“stars: most GitHub stars first.”limitintegeroffsetinteger
- get_pricingon 192 other servers
“Structured pricing and capabilities for one vendor: every plan, base fee, metered usage, limits, unmodelled costs, lock-in notes, source URL and verification date.”
Publisher declares: read-only yes · open-world no
1 input, 1 required
vendor_idstringrequired
- estimate_coston 48 other servers
“Monthly cost for one vendor at a given scale.”
Publisher declares: read-only yes · open-world no
10 inputs, 1 required
vendor_idstringrequiredplan_idstringmaunumberusageobject“Exact monthly usage by unit (mau, seat, request_million, bandwidth_gb, db_storage_gb, egress_gb, email, event, error_event, compute_hour, revenue_usd, transact…”requiredarray“Capability ids the plan must include.”profile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
- compare_vendorson 3 other servers
“Rank vendors in one category at a given scale.”
Publisher declares: read-only yes · open-world no
9 inputs, 2 required
categorystringrequiredmaunumberrequiredrequirementsarrayexcludearrayprofile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
- check_fiton 15 other servers
“For each vendor, show whether each requirement is met on its cheapest plan, needs a higher tier (with that tier's cost), or is missing.”
Publisher declares: read-only yes · open-world no
8 inputs, 2 required
vendor_idsarrayrequiredrequirementsarrayrequiredmaunumberprofile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
- project_stack
“Month-by-month cost for a whole stack as users grow, with startup perks applied if requested, plus cost cliffs (forced plan upgrades, sharp jumps, credits running out).”
Publisher declares: read-only yes · open-world no
12 inputs, 2 required
vendorsarrayrequiredstart_maunumberrequiredmonthly_growthnumber“e.g.”monthsintegermau_seriesarray“Explicit MAU per month; overrides start_mau, monthly_growth and months.”apply_perksbooleanfounderobject“Optional company details used only to find startup perks.”profile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
- find_cost_cliffs
“Scan a range of user counts for one vendor and report where cost jumps: forced plan upgrades and points where usage charges start.”
Publisher declares: read-only yes · open-world no
9 inputs, 1 required
vendor_idstringrequiredfrom_maunumberto_maunumberrequiredarrayprofile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
Show 14 more tools
- find_perks
“Startup credits for the given vendors, and whether you qualify based on your bank, incorporation provider, accelerator or funding.”
Publisher declares: read-only yes · open-world no
2 inputs
vendor_idsarrayfounderobject“Optional company details used only to find startup perks.”
- extract_requirements
“Turn PRD or spec text into structured requirements (scale, capabilities, compliance, regions, budget) for plan_stack, without planning.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
prd_textstringrequired
- plan_stack
“Given confirmed requirements as capability ids, recommend a vendor per category with a runner-up, requirement fit, cost now, cost at forecast scale, year-one cost after perks, cost cliffs, trade-offs…”
Publisher declares: read-only yes · open-world no
20 inputs
categoriesarraymau_nownumber“Monthly active users now.”app_typestring“Kind of app, from Product Hunt's categories: productivity, engineering_development, design_creative, finance, marketing_sales, data_analysis, platforms, no_cod…”mau_forecastnumberforecast_monthsintegerrequirementsarraybudget_monthly_usdnumberapply_perksbooleanfounderobject“Optional company details used only to find startup perks.”exclude_vendorsarrayarchitecturestring“Plan with only this architecture's vendors, from compare_architectures (e.g.”answersobject“Interview answers by question id, each an option id from compare_architectures, e.g.”platformsarray“Where the app runs; with architecture, a phone-only app leaves out web hosting.”profile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”task_intentstring“What the user is trying to do, in a few words, e.g.”output_destinationstring“Where the answer goes.”
- evaluate_change
“When something changes (bill too high, growth, a missing feature such as SSO, a renewal), compare staying on the current plan, optimising with the same vendor, and switching vendor, including one-off…”
Publisher declares: read-only yes · open-world no
14 inputs, 3 required
categorystringrequiredcurrentobjectrequiredmau_nownumberrequiredmonthly_growthnumbermonthsintegerrequirementsarrayswitchingobjectswitch_tostring“Evaluate a specific vendor instead of the best-ranked alternative.”founderobject“Optional company details used only to find startup perks.”profile_idstring“Usage profile: b2b_saas (default), consumer_app, booking_marketplace, content_site, ios_on_device.”per_1k_mauobject“Override usage per 1,000 MAU.”seatsinteger“Team members on per-seat plans.”revenue_per_mau_usdnumber“Average monthly revenue per active user (for payment fees).”transactions_per_maunumber“Payments per active user per month.”
- detect_stackon 4 other servers
“Work out which services an existing app runs on, from its files, a public GitHub repo, or its live website.”
Publisher declares: read-only yes · open-world yes
4 inputs
filesarraytextstring“Pasted text, e.g.”repostring“Public GitHub repo: owner/name or its github.com address.”urlstring“The live website, to read its hosting headers and the scripts it loads.”
- audit_stack
“Assess the stack an existing app runs on and recommend what to do.”
Publisher declares: read-only yes · open-world no
11 inputs, 2 required
stackarrayrequiredmau_nownumberrequiredmau_forecastnumber“Monthly active users expected in 12 months.”profile_idstring“Usage profile, e.g.”requirementsarraybudget_monthly_usdnumberrevenue_per_mau_usdnumberfounderobject“Optional company details used only to find startup perks.”switchingobjectprioritiesobject“How much each criterion matters, 0 (not at all) to 3 (most).”unpricedarray“Services detect_stack found that the catalogue can't price (its "unknown" list).”
- diff_stack
“What a code change does to an app's bill: pass the files before (base_files) and after (head_files) the change, such as package.json, requirements.txt, .env.example (names only) and deploy configs.”
Publisher declares: read-only yes · open-world no
7 inputs, 2 required
base_filesarrayrequiredhead_filesarrayrequiredmau_nownumber“Monthly active users today.”mau_forecastnumber“Users expected in 12 months.”profile_idstringplansarray“Plans the app is on, when known.”requirementsarray
- save_stack
“Save a recommended stack, or an audit of an existing app, to the signed-in user's Kong Reviews account so it can be reopened later and compared with current prices.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
3 inputs, 1 required
namestringrequired“Short name the user will recognise.”share_urlstring“share_url returned by recommend_stack, plan_stack or audit_stack.”planobject“plan_stack arguments, if there is no share_url.”
- list_saved_stacks
“List the stacks the signed-in user saved, newest first, with their monthly cost when saved and a link to each.”
Publisher declares: read-only yes · open-world no
Takes no inputs.
- get_saved_stack
“Re-run a saved stack or audit with today's catalogue and compare it with when it was saved: monthly cost then and now, picks (or plans) that changed, vendors whose pricing changed and, for audits, th…”
Publisher declares: read-only yes · open-world no
4 inputs, 1 required
idstringrequiredbills_monthstring“Month (YYYY-MM) for the bills comparison; default the newest with bills.”task_intentstring“What the user is trying to do, in a few words, e.g.”output_destinationstring“Where the answer goes.”
- update_saved_stack
“Change one of the signed-in user's saved stacks or audits: its name, how many users it has now (mau_now) or expects (mau_forecast), and whether to email them when it changes (alerts).”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
6 inputs, 1 required
idstringrequirednamestringmau_nownumber“Monthly active users today.”mau_forecastnumber“Users expected at the end of the forecast (12 months for audits).”alertsboolean“Email the user when prices, cost jumps or credits change this stack.”emailstring“Where alerts go.”
- record_bills
“Record what the user actually paid each service in a month, on one of their saved stacks or audits, and compare it with the estimate at the users it was saved with.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
7 inputs, 1 required
idstringrequiredbillsarraycsvstring“A CSV billing export: a header row, then one row per charge.”invoice_textstring“One invoice's text, copied from the PDF or the email.”previewboolean“With invoice_text: read it and show what was found, without saving.”removeobjectmonthstring“Which month to compare.”
- delete_saved_stack
“Permanently delete one of the signed-in user's saved stacks by id.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
1 input, 1 required
idstringrequired
- delete_accounton 6 other servers
“Permanently delete the signed-in user's Kong Reviews account: their GitHub sign-in link and every saved stack.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
1 input, 1 required
confirmstringrequired
Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-24.
How well are its tools described?
Features #4 and #5
How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.
Descriptions
AI reading of each description
No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).
Counted from the listing
- Parameters with a description
- 62% of 178
- Tools with a description
- 100% of 26
- Typical description length
- 525 characters
The tool set
Counted from the listing
- Tools
- 26
- Size of the list
- about 20,829 tokens for an agent to load (characters ÷ 4)
- Naming
- 26 of 26 names use snake_case
AI reading: easy to mix up
No pair found.
The AI items cover 0 of 26 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.
How do I add it to my client?
Config from the registry entry
From the remote endpoint (Streamable HTTP)
We connected to this URL on 2026-10-24 (a read-only session: no tool was called).
Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.
Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste: https://kongreviews.com/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
"mcpServers": {
"kongreviews": {
"url": "https://kongreviews.com/mcp"
}
}
}VS Code · .vscode/mcp.json
{
"servers": {
"kongreviews": {
"type": "http",
"url": "https://kongreviews.com/mcp"
}
}
}VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"kongreviews","type":"http","url":"https://kongreviews.com/mcp"}'Claude Code
claude mcp add --transport http kongreviews https://kongreviews.com/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://kongreviews.com/mcp --transport http
- The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
- The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.
Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.
Does the registry listing match what we found?
Feature #6The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.
| Registry says | We found | Result | Source · date |
|---|---|---|---|
| Remote endpoint kongreviews.com/mcp | Session opened | matches | our test · 2026-10-24 |
| No credential declared as required | Opened a session without any credential | matches | our test · 2026-10-24 |
Choosing
Record checks
Public records · not a safety rating1 of 2 record checks met · 7 do not apply
- MetRegistry entry is active and says how to run itActive, with a package or a remote address.
- Not metSource repository link opensThe registry entry gives no repository link.
- Does not applyRepository is not archivedNo public GitHub repository to read.
- Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
- Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
- Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
- Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
- Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
- Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.
Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards
Common questions about com.kongreviews/kongreviews
Answered from the data aboveDoes com.kongreviews/kongreviews need an API key or sign-in?
It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.
Has com.kongreviews/kongreviews been security tested?
Partly. 4 of the 15 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security verdict is published before verification.
Found this page useful?
Anonymous · no sign-inA quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.
Compare with another server
Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.
Security testing
What did we test, and what did we leave out?
18 checks · features #1, #2
Open without sign-in
It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.
- Inventory: exercised
- Hidden instructions: exercised
- Real execution: not run · our policy
- Secret leak: not run · nothing to check it against
- Internal addresses: not run · our policy
- Unconfirmed changes: not run · our policy
- Bad input: not run · our policy
- Model requests: not run · nothing to check it against
- Sensitive questions: not run · nothing to check it against
- Folder boundary: not run · our policy
- Log leaks: not run · nothing to check it against
- Hidden content: exercised
- Fake assistant turns: not applicable
- Token passthrough: not applicable
- Token audience: not applicable
- Sign-in redirect: not run · our policy
- Consent handling: not testable from outside
- Sign-in metadata: exercised
4 exercised11 not run (reason given)3 not applicable
Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.
- 1Inventory
tool-listReads the declared tools, resources and prompts.exercised - 2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised - 12Hidden content
audience-hidingChecks resources that hide content from the user.exercised - 18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised
- 3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy - 17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
- 13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable - 14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable - 15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.
What happened during the test?
Feature #8
The steps in order, as the test record holds them.
- 0 msStarted a read-only session with the server's remote endpoint
- 1,278 msConnected after 0 redirects. No credential was sent or needed.
- Read the inventory: 26 tools, 1 resource, 0 prompts.
- 5,951 msFinished: 4 checks exercised.
Reference
How is it classified?
18 fields
One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.
“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.
Cite or correct this page
Sources and corrections
Suggested citation
ProtocolProbe. “com.kongreviews/kongreviews: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/com.kongreviews/kongreviews
Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.
As JSON: this record in the API · API documentation.
Badge for your README
[](https://protocolprobe.com/mcp/servers/com.kongreviews/kongreviews)
It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.
Something wrong, or is this yours?
If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.
Write to hello@protocolprobe.com · corrections log · methodology