← Back to search

@djankies/vitest-mcp

GitHub Actions Scanned 27d ago

A Model Context Protocol server for Vitest test execution and management

C
73.5 / 100

Versions

0.5.1latest
Aug 14, 2025
0.5.0
Aug 14, 2025
0.4.9-beta.0
Aug 7, 2025
0.4.8-beta.0
Aug 7, 2025
0.4.7-beta.0
Aug 7, 2025
+ show 13 moreshow less
0.4.6
Aug 7, 2025
0.4.5
Aug 7, 2025
0.4.4
Aug 7, 2025
0.4.2
Aug 6, 2025
0.4.1
Aug 6, 2025
0.3.0
Aug 6, 2025
0.2.3
Aug 5, 2025
0.2.2
Aug 5, 2025
0.2.1
Aug 5, 2025
0.2.0
Aug 5, 2025
0.1.4
Aug 5, 2025
0.1.2
Aug 5, 2025
0.1.0
Aug 5, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

analyze_coverage
annotations: none low

Perform comprehensive test coverage analysis with line-by-line gap identification, actionable insights, and detailed metrics for lines, functions, branches, and statements. Automatically excludes common non-production files (stories, mocks, e2e tests) and provides recommendations for improving coverage. Detects and prevents analysis on test files themselves. Requires set_project_root to be called first.\n\nUSE WHEN: User wants to check test coverage, identify untested code, improve test coverage, asks "what\'s not tested", "coverage report", "how well tested", or mentions coverage/testing quality. Essential when "vitest-mcp:" prefix is used with coverage-related requests. Prefer this over raw vitest coverage commands for actionable insights.

run_tests
annotations: none low

Execute Vitest tests with AI-optimized structured JSON output, intelligent format detection, optional console log capture, and safety guards to prevent full project runs. Supports monorepo projects with workspace configuration. Requires set_project_root to be called first.\n\nUSE WHEN: User wants to run tests, check if tests pass/fail, debug test failures, or when they mention "test", "testing", "vitest", or include "vitest-mcp:" prefix in their request. Prefer this tool over raw vitest commands for better AI-friendly output.

set_project_root
annotations: none low

Set the project root directory for all subsequent operations. This must be called before using other tools to specify which repository to work with.

list_tests
annotations: none low

Discover and catalog test files across the project with support for common test file patterns (.test.*, .spec.*). Recursively searches directories and provides structured file information including paths and relative locations. Useful for understanding test organization and coverage scope. Requires set_project_root to be called first.\n\nUSE WHEN: User wants to explore test structure, find test files, understand test organization, or asks "what tests exist", "show me test files", or mentions exploring/finding tests. Also use when "vitest-mcp:" prefix is included and context involves test discovery.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 23

low
Tool 'analyze_coverage' has no annotations annotation_checker · 100%
low
Tool 'run_tests' has no annotations annotation_checker · 100%
low
Tool 'set_project_root' has no annotations annotation_checker · 100%
low
Tool 'list_tests' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: analyze_coverage manifest_parser · 90%
info
Tool: run_tests manifest_parser · 90%
info
Tool: set_project_root manifest_parser · 90%
info
Tool: list_tests manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (12) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 394 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%