Verified Security Benchmark Report
PrefectHQ/fastmcp
Scanned at Tue, 03 Nov 2026 19:45:39 GMT • MCP Spec: Unknown • Ephemeral execution sandbox.
Security Grade
B
Score: 83 / 100
Official Verification Badge for README.md
[](https://adalab.cc/audit/PrefectHQ/fastmcp)Copy and paste this markdown snippet into your GitHub repository README to display live verification status to users and security reviewers.
Schema Conformance
70%
Tool Containment
88%
Token & Secret Safety
95%
Fuzz Resilience
65%
Security & Conformance Diagnostics (2)
medium[ADA-SEC-004]
Missing Tool Parameter Descriptions in Schema
One or more tools lack detailed field descriptions. AI agents require clear semantic descriptions to select parameters accurately without hallucinations.
Remediation: Add descriptive docstrings or `description` fields to each schema property inside `inputSchema`.
low[ADA-SEC-005]
Missing Network Abort / Timeout Controls
External network operations within tools do not appear to specify timeout or AbortController guards, creating vulnerability to resource exhaustion.
Remediation: Wrap fetch/HTTP requests with explicit timeouts (e.g. 15s) using `AbortSignal.timeout(15000)`.
Automate this Security Gate in CI/CD
Run AdaLab on Every Pull Request for PrefectHQ/fastmcp
Install our official 3-line GitHub Action. Block vulnerable code before merging, receive Slack/Discord alerts, and ensure your badge stays green.