MCP Hook Conformance

Part of the StudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it

mcp-hook-conformance

[npm version] [npm downloads] [License] [Last commit] [GitHub stars]

The third foundation pillar:

• mcp-protocol-conformance says: does the server speak the protocol?
• mcp-server-attestation says: who signed this server?
• mcp-hook-conformance says: is it safe to call this tool from a Stop, PreCompact, or UserPromptSubmit hook?

A note from us

We have been building tools and systems for ourselves for the past two years. The fact that this repo is small and has few stars is not because it is new. It is because we only just decided to share what we have built. It is not a fresh experiment, it is a long story with a recent commit.

We love building things and sharing them. We do not love social media tactics, growth hacks, or chasing stars and followers. So this repo is small. The code is real, it gets used, issues get answered. Judge for yourself.

If it helps you, sharing, testing, and feedback help us. If it could be better, an issue is more useful. If you build something with it, tell us at [email protected]. That genuinely makes our day.

From a small studio in Palma de Mallorca.

Install

npm install -g mcp-hook-conformance

Or run without install:

npx mcp-hook-conformance check ./hook-conformance.config.json

Quick start

# 1. Scaffold a confignpx mcp-hook-conformance init --server-name my-mcp-server
# 2. Edit hook-conformance.config.json (point command/args at your server)
# 3. Run the auditnpx mcp-hook-conformance check ./hook-conformance.config.json

Exit codes:

• 0 audit passed (no FAILs)
• 1 audit produced at least one FAIL
• 2 config error (missing file, invalid schema, unknown suite name)

Subcommands

This is a CLI, not an MCP server. Do NOT run mcp-hook-conformance via mcp-inspector — the package declares mcp.specVersion for the targets it audits, not because it speaks MCP itself. Inspector will EACCES on dist/index.js (which is the library export) by design.

Audit suites

Suite scoring: PASS = 100, WARN = 60, INDETERMINATE = 50, FAIL = 0. Tool score = weighted average across configured suites. Aggregate score = mean of tool scores.

Config format

{  "$schema": "https://studiomeyer-io.github.io/mcp-hook-conformance/config.schema.json",  "server": {    "name": "my-mcp-server",    "transport": "stdio",    "command": "npx",    "args": ["-y", "my-mcp-server"],    "env": {}  },  "suites": ["idempotency", "latency", "determinism", "side-effects", "dsgvo"],  "tries": 3,  "thresholds": {    "latencyP50Ms": 30000,    "latencyP95Ms": 60000  },  "probes": [    {      "name": "search_things",      "args": { "query": "audit-fixed-input" },      "stateProbe": {        "tool": "list_things",        "args": {}      }    }  ],  "toolFilter": ["search_things", "get_thing"]}

probes lets you pin specific arguments per tool and (for read-only tools) a stateProbe so the side-effects suite can detect mutations. Without a stateProbe the side-effects suite returns INDETERMINATE for that tool.

Finding codes

Run mcp-hook-conformance explain <code> for full remediation text.

Compatibility

Tested transports:

• stdio (primary)
• HTTP streamable (experimental, audit semantics same as stdio)

Reference smoke tests

The tests/smoke/ suite runs the audit against production tenants of mcp-nex and mcp-crm. Opt-in:

RUN_SMOKE_TESTS=1 npm run test:smoke

Snapshot drift triggers a manual review, not a CI fail.

Limitations (read these)

• Side-effect detection is not hermetic. Without a stateProbe we cannot black-box prove a read-only tool is pure. We return INDETERMINATE instead of false-positive FAIL.
• Latency is end-to-end stdio roundtrip. Includes JSON-RPC framing, not pure compute.
• DSGVO suite is keyword heuristic. It catches missing docs reliably; "looks compliant" is not legal advice.
• No auto-fix. This tool reports findings; you fix them.

About StudioMeyer

StudioMeyer is an AI and design studio based in Palma de Mallorca, working with clients worldwide. We build custom websites and AI infrastructure for small and medium businesses. Production stack on Claude Agent SDK, MCP and n8n, with Sentry, Langfuse and LangGraph for observability and an in-house guard layer.

License

MIT © 2026 Matthias Meyer (StudioMeyer)