`.mcp.json` has no per-server `trust` key — verified 2026-06-18 against code.claude.com/docs/en/mcp + /settings. MCP server approval is dialog/settings-based (enableAllProjectMcpServers / enabledMcpjsonServers / disabledMcpjsonServers), never a JSON field. The scanner's "Missing trust level" (CA-MCP-001, medium) and "Invalid trust level" (high) were false positives flagging a field that does not exist. - scanner: delete both trust checks + VALID_TRUST_LEVELS; drop `trust` from VALID_SERVER_FIELDS so a stray `trust` is now flagged as an unknown field - humanizer: remove the two trust-level entries - knowledge (5 files): point to the real approval mechanism, not a trust field - fixtures: scrub `trust` (incl. the invalid "local" in optimal-setup) - tests: flip assertions (no trust-level finding; stray trust -> unknown field) + add knowledge-staleness re-freeze guards - snapshots: reseed (marketplace-medium .mcp.json -8 tokens, hermetic) - gap-matrix: mark the trust verify-first item DONE Suite: 853/853 green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ter3E2JSi1Khgmuf2kady8
30 lines
1.4 KiB
Text
30 lines
1.4 KiB
Text
[CML] CLAUDE.md Linter: 1 finding(s) (14ms)
|
|
[SET] Settings Validator: 0 finding(s) (2ms)
|
|
[HKV] Hook Validator: 0 finding(s) (1ms)
|
|
[RUL] Rules Validator: 0 finding(s) (0ms)
|
|
[MCP] MCP Config Validator: 0 finding(s) (0ms)
|
|
[IMP] Import Resolver: 0 finding(s) (2ms)
|
|
[CNF] Conflict Detector: 0 finding(s) (1ms)
|
|
[GAP] Feature Gap Scanner: 17 finding(s) (2ms)
|
|
[TOK] Token Hotspots: 1 finding(s) (8ms)
|
|
[CPS] Cache-Prefix Stability: 0 finding(s) (0ms)
|
|
[DIS] Disabled-In-Schema: 0 finding(s) (1ms)
|
|
[COL] Plugin Skill Collision: 0 finding(s) (0ms)
|
|
|
|
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
|
|
Config-Audit Health Score
|
|
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
|
|
|
|
Health: A (98/100) 9 areas scanned
|
|
|
|
Area Scores
|
|
───────────
|
|
CLAUDE.md ........... A (90) Settings ............ A (100)
|
|
Hooks ............... A (100) Rules ............... A (100)
|
|
MCP ................. A (100) Imports ............. A (100)
|
|
Conflicts ........... A (100) Token Efficiency .... A (90)
|
|
Plugin Hygiene ...... A (100)
|
|
|
|
17 opportunities available — run /config-audit feature-gap for recommendations
|
|
|
|
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
|