Loading…
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The Universal MCP Server MCP server exposes 22 tools, focused primarily on database and web capabilities. Its published description reads: "Windows discussion forum and help community". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates Universal MCP Server F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check Universal MCP Server's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add Universal MCP Server to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.windowsforum.com/Streamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Search all WindowsForum content (threads, posts, Windows news) with combined keyword and semantic ranking — the best first call for any question or topic; returns snippets with ids for the fetch tool.
Retrieve the complete content of a WindowsForum document (thread or post) by ID — use after search to read the full discussion for detailed analysis and citation. Returns the full text for detailed an
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: search
A tool description tries to alter the model’s use of another tool.
ith ids for the fetch tool. Returns a list of search results with baRecommendationDescriptions must describe only their own tool.
tool: fetch
A tool description tries to alter the model’s use of another tool.
ID — use after search to read the full discussion for detailed analysRecommendationDescriptions must describe only their own tool.
tool: search_semantic
A tool description tries to alter the model’s use of another tool.
-based semantic search that excels at natural-language questions and pRecommendationDescriptions must describe only their own tool.
tool: search_threads
A tool description tries to alter the model’s use of another tool.
Search WindowsForum threads with structured controls —RecommendationDescriptions must describe only their own tool.
tool: search_kb
A tool description tries to alter the model’s use of another tool.
Search official Microsoft Knowledge Base articles on sRecommendationDescriptions must describe only their own tool.
tool: get_thread_posts
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
follow the full conversation, including replies and accepted solutions, afteRecommendationRemove side-channel parameters; constrain tool inputs.
tool: get_thread_posts
A tool description tries to alter the model’s use of another tool.
ng a thread via search.RecommendationDescriptions must describe only their own tool.
tool: search_mysql
A tool description tries to alter the model’s use of another tool.
anked full-text search. Complements the main `search` tool: use thisRecommendationDescriptions must describe only their own tool.
tool: search_elastic
A tool description tries to alter the model’s use of another tool.
ull-text thread search with explicit offset pagination — use to page tRecommendationDescriptions must describe only their own tool.
tool: get_thread
A tool description tries to alter the model’s use of another tool.
onical URL; use fetch or get_thread_posts to read its content.RecommendationDescriptions must describe only their own tool.
tool: list_threads
A tool description tries to alter the model’s use of another tool.
thout needing a search query.RecommendationDescriptions must describe only their own tool.
tool: get_forum
A tool description tries to alter the model’s use of another tool.
unts; pair with list_threads or get_forum_updates to see its activity.RecommendationDescriptions must describe only their own tool.
tool: search_posts
A tool description tries to alter the model’s use of another tool.
Search individual WindowsForum posts (not just threadRecommendationDescriptions must describe only their own tool.
tool: search_users
A tool description tries to alter the model’s use of another tool.
before calling get_user for their full profile.RecommendationDescriptions must describe only their own tool.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
s comprehensive search and document retrieval capabilities for WindowsRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: search
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: fetch
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: search_semantic
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: get_kb_article
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: search_kb
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Find WindowsForum discussions by meaning rather than exact words — embedding-based semantic search that excels at natural-language questions and paraphrased topics. Uses kNN vector similarity to find
Search WindowsForum threads with structured controls — sort by relevance, date, replies, or views, in either order, with pagination; use when result ordering or paging matters.
Get the current server date and time — use to anchor time-sensitive queries like 'latest' or 'this week' before searching recent content. Returns: Current timestamp in ISO format
Retrieve an official Microsoft Knowledge Base article from support.microsoft.com by KB number (e.g. KB5063878) — returns the update's title, summary, and affected builds. Use this tool when a user ask
Search official Microsoft Knowledge Base articles on support.microsoft.com by topic or keyword — use for Windows update, patch, and known-issue lookups when you lack a KB number. Returns matching KB a
Read every post in a WindowsForum thread by thread id, in order — use to follow the full conversation, including replies and accepted solutions, after finding a thread via search.
Exact substring lookup over thread titles and author usernames, ordered by view count — use for literal title or author matching rather than relevance-ranked full-text search. Complements the main `se
Relevance-ranked full-text thread search with explicit offset pagination — use to page through a large result set beyond what the main search tool returns. Complements the main `search` tool: use this
Get a WindowsForum thread's metadata by id — title, author, reply and view counts, dates, and canonical URL; use fetch or get_thread_posts to read its content.
List the most recently active WindowsForum threads with pagination — use to see what the community is discussing right now, without needing a search query.
Get a single WindowsForum post by post id — returns the post's text, author, thread context, and URL; use when you have a specific post reference to verify or quote.
Look up a WindowsForum member's public profile by username or user id — registration date, message count, reaction score, and role.
Get a WindowsForum forum section's details by node id — title, description, and thread/message counts; pair with list_threads or get_forum_updates to see its activity.
Summarize recent WindowsForum activity over the last N hours (default 24) — new threads and posts across the community; use for "what's new" questions.
See who is on WindowsForum right now — counts of members, guests, and robots currently online, with recently active member names. Returns: Dictionary with online users and guest count
List the newest WindowsForum member registrations — use for community-growth questions or to identify recent joiners.
Get sitewide WindowsForum statistics — total threads, posts, and members, plus the newest member; use for questions about the community's size and activity. Returns: Dictionary with various forum stat
Search individual WindowsForum posts (not just thread titles) for a keyword or phrase — use to find specific answers, error messages, or fixes buried inside long threads.
Find WindowsForum members whose usernames match a query — use to locate a member before calling get_user for their full profile.
Get WindowsForum's recent Windows news coverage from the last N days (default 7) — curated news threads on updates, security patches, and Microsoft announcements.