Python Sdk

modelcontextprotocol/python-sdkMITโญ 22,113๐Ÿ”ง 66 tools

D6.0SpiderScore (registry)

The official Python SDK for Model Context Protocol servers and clients

โš  Hard constraint applied: critical issue caps D
Decision
Consider
Confidence
90%

Python Sdk is usable with minor concerns (6.05/10, 1 critical, 0 high).

Recommended Actions

  • high
    Run In Container
    1 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • โœ—running in production without container isolation
Risk Flags (1)
  • critical
    command_injection
    Command injection risk รขโ‚ฌโ€ subprocess called with shell=True and non-literal command
How This Was Decided
  • positivew=0.5Overall quality score = 6.05/10 (grade D)
  • negativew=0.81 critical security issue(s) detected
  • negativew=0.3Tool description clarity score = 1.9/10
Source: SpiderRating automated security scanUpdated: 2026-03-13Protocol: v1.1

Description Quality

Composite: 1.9 / 10

3-Layer Breakdown

Description (38%)
1.9
Security (34%)
7.7
Metadata (28%)
9.7

Description Dimensions

Intent Clarity
2.6
Permission Scope
0.3
Side Effects
2.5
Capability Disclosure
2.6
Operational Boundaries
2.0

Security Analysis

7.7
Score
1
Critical
0
High
0
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

1 CRITICAL

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
9.0
Popularity (25%)
10.0

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/modelcontextprotocol__python-sdk.svg)](https://spiderrating.com/servers/modelcontextprotocol/python-sdk)