Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
SmartBear's own MCP server for its testing and API products. The Swagger, BugSnag and Zephyr tools are hosted (Swagger at swagger.mcp.smartbear.com/mcp) with an OAuth browser sign-in, and the open-source MIT npm package (@smartbear/mcp) covers every product, including PactFlow, Reflect and QMetry, using API keys. Very active, with 26 people committing in the last 90 days, and no advisories on record. Biggest deduction: the README does not say what scopes the OAuth sign-in grants, and the npm route puts unscoped product API keys in a config file, so use the hosted endpoint and keep tool approval on. The hosted service itself is closed source; the package is the open part.
How to connect
Hosted Swagger: https://swagger.mcp.smartbear.com/mcp (OAuth sign-in). Local: npx @smartbear/mcp (set the product API keys you use)
Is SmartBear MCP Server safe?
Is SmartBear MCP Server safe to use?
SmartBear MCP Server grades A (strong public trust signals). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.
Does SmartBear MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does SmartBear MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.