Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

MCP server · Audited from source

AdTest.AI MCP server

by menaker/adtest-mcpMIT licenceAudited 19 Sep 2026 · source e36f2c66c7c7

npm adtest-mcp 1.1.0stdio★ 0
✓SAFEGrade B · 89/100 · 19 Sep 2026 · e36f2c6
0GitHub stars
InstallView source on GitHub ↗

Is it safe? Yes — SAFE, grade B (89/100). It exposes 1 tool: 0 read, 1 write and 0 destructive. The audit recorded 1 finding (0 critical, 0 high, 0 medium, 1 low). Maintainer's description: MCP server for AdTest.AI: score image, video or text ads with a 13-dimension AI analysis inside Claude and other MCP clients

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “AdTest.AI MCP server (menaker/adtest-mcp)”. Retrieved 19 Sep 2026. https://modelsatlas.com/mcp/menaker/adtest-mcp

Trust audit

Audit 0.4.1 · full source read 19 Sep 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium1 low0 info

1 finding, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.

What the source does

  • FilesystemNone observedNothing seen in the source
  • NetworkDeclared3 observations
  • ShellNone observedNothing seen in the source
  • DependenciesNot pinnedSome ranges float
  • SecretsNone foundNo keys in source

“Declared” means the server says it does this and the source agrees. Browser, file and shell access are expected of some kinds of server.

Five audit layers

LayerWhat we checkResult
L0 ProvenanceRepo owner, licence, archive status, activityPASS
L1 Static sourceSecrets, path traversal, supply chainPASS 1 finding
L2 InstructionsPrompt injection and authority framing in docs and tool descriptionsPASS
L3 InventoryDeclared tools match the sourcePASS
L4 SandboxRun in isolation and watch behaviourSKIPPED

Provenance & runtime

Who published it, and what the audit could and could not run

Provenance

  • Repository owner menakerUser accountAccount type recorded when we read the repository.
  • PackagePublished on npmadtest-mcp at version 1.1.0
  • LicenceMITFrom the repository, as read at the audited commit.
  • Last pushTodayActivity of the repository when we read it.
  • Source commit reade36f2c66c7c7The audit covers exactly this commit, read on 19 Sep 2026.

Runtime

  • Sandbox runNot run yetThis audit read the source only; it did not execute the server.
  • Tool inventory1 declaredRead from the source and classed read, write or destructive.

Every value here is read from the record's own repository and audit.Suggest a correction

Findings (1)

Sorted by severity

LOWSupply chainsupply.unpinned · package.json
F-08 Supply chainCWE-829 · CWE-1357Layer L1
@modelcontextprotocol/sdk
Why
1 dependency range(s) float
Fix
pin exact versions or ship a lockfile

Tools it exposes

1 declared in source · 0 destructive

0 read1 write0 destructive
ToolRiskWhat it does
analyze_advertwriteRun an AI-only analysis of an advert and get a detailed scoring report.

Install

Package version 1.1.0 · audited commit e36f2c6

claude mcp add adtest-mcp --env ADTEST_API_KEY=${ADTEST_API_KEY} -- npx -y [email protected]

The command pins the package version recorded in the source (1.1.0); the audit covers commit e36f2c66c7c7. Transport: stdio. Reads this environment variable: ADTEST_API_KEY. Give it the narrowest token it needs.

Audit history

  1. ✓SAFE B 89 / 100

    Source changed, verdict held · e36f2c66c7c7

  2. ✓SAFE B 89 / 100

    First audit · cefa7f7bdd1e

README badge

For maintainers · updates on every re-audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B 
[![ModelsAtlas: SAFE B](https://modelsatlas.com/mcp/menaker/adtest-mcp/badge.svg)](https://modelsatlas.com/mcp/menaker/adtest-mcp/)

The badge always shows the latest audit; a maintainer cannot pin an old verdict.

Other ratings

Cited, never blended into our score

No third-party security ratings are recorded for this server yet. When they exist they appear here with their source and date, beside, not inside, our grade.

Questions about AdTest.AI MCP server

What is the AdTest.AI MCP server MCP server?
MCP server for AdTest.AI: score image, video or text ads with a 13-dimension AI analysis inside Claude and other MCP clients
What tools does AdTest.AI MCP server expose?
1 in total: 0 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is AdTest.AI MCP server safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does AdTest.AI MCP server need?
It reads ADTEST_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does AdTest.AI MCP server run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as adtest-mcp at 1.1.0.
How current is this page?
The grade is for one exact copy of the source (e36f2c66c7c7), read on 2026-09-19. The repository is watched and re-audited when it changes.

Sources

  • menaker/adtest-mcp on GitHub — the source we read, its licence, stars and activityObserved · 19 Sep 2026
  • ModelsAtlas trust audit — SAFE verdict for commit e36f2c66c7c7Observed · 19 Sep 2026

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.