Home / modelcontextprotocol / csharp-sdk
AI Slop Code RIsk Monitor

modelcontextprotocol/csharp-sdk

The official C# SDK for Model Context Protocol servers and clients. Maintained in collaboration with Microsoft.

7.7 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for modelcontextprotocol/csharp-sdk, a C# project with 4,576 GitHub stars. SynthScan examined 139,246 lines of code across 816 source files, recording 933 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 7.7 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

7.7
Adjusted Signal
7.7
Raw Pattern Score
100%
Time Factor
2026-10-05
Last Push
4.6K
Stars
C#
Language
139.2K
Lines of Code
816
Files
933
Pattern Hits
2026-10-12
Scan Date
0.02
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 29.4/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 895 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 21 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 18 finding(s).

PR Review Velocity Impact 31.6/100 · MEDIUM

Which changes need focused human review? 933 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 3HIGH 12MEDIUM 19LOW 899

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 933 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block818 hits · 816 pts
SeverityFileLineSnippetContext
LOW…s/ModelContextProtocol.Tests/ClientIntegrationTests.cs421 // new() { Uri = "file:///test/root2", Name = "Test Root 2" }COMMENT
LOW…extProtocol.Tests/ExperimentalInternalPropertyTests.cs21 // [Experimental] properties on stable protocol types must use the internal propertyCOMMENT
LOWtests/ModelContextProtocol.Tests/TestAttributes.cs1// Uncomment to disable parallel test execution for the whole assemblyCOMMENT
LOW…lContextProtocol.Tests/Server/MrtrSessionLimitTests.cs21 /// </summary>COMMENT
LOW…l.Tests/Server/ProtocolVersionResultDecorationTests.cs1using Microsoft.Extensions.DependencyInjection;COMMENT
LOW…otocol.Tests/Server/July2026ProtocolBackcompatTests.cs1using Microsoft.Extensions.DependencyInjection;COMMENT
LOW…rotocol.Tests/Client/McpClientResourceTemplateTests.cs101 public IList<List<JsonElement>> TestCases { get; set; } = [];COMMENT
LOW….Tests/Client/July2026ProtocolListMetaEmissionTests.cs1using Microsoft.Extensions.DependencyInjection;COMMENT
LOW…lContextProtocol.AspNetCore.Tests/MrtrProtocolTests.cs241COMMENT
LOW…l.AspNetCore.Tests/ResumabilityIntegrationTestsBase.cs21/// <remarks>COMMENT
LOW…l.AspNetCore.Tests/ResumabilityIntegrationTestsBase.cs41 /// <summary>COMMENT
LOW…tProtocol.AspNetCore.Tests/ConformanceServerFixture.cs1using System.Diagnostics;COMMENT
LOW….Tests/DistributedCacheResumabilityIntegrationTests.cs1using Microsoft.Extensions.Caching.Distributed;COMMENT
LOW…extProtocol.AspNetCore.Tests/ClientConformanceTests.cs201 }COMMENT
LOW…xtProtocol.AspNetCore.Tests/CachingConformanceTests.cs1using ModelContextProtocol.Tests.Utils;COMMENT
LOW…extProtocol.AspNetCore.Tests/ServerConformanceTests.cs81 $"Conformance test failed.\n\nStdout:\n{result.Output}\n\nStderr:\n{result.Error}");COMMENT
LOW….AspNetCore.Tests/July2026ProtocolHttpFallbackTests.cs21/// on a 2026-07-28 probe; vanilla Go does the same on <c>POST /</c>) so the client's HTTP-fallbackCOMMENT
LOW…tocol.AspNetCore.Tests/ResumabilityIntegrationTests.cs1using System.Net.ServerSentEvents;COMMENT
LOW….Tests/OAuth/IdentityAssertionGrantIntegrationTests.cs1using Microsoft.Extensions.DependencyInjection;COMMENT
LOWtests/Common/Utils/NodeHelpers.cs201 /// <c>http-custom-headers</c> scenario. Prereleases 0.2.0-alpha.5 through 0.2.0-alpha.7COMMENT
LOWtests/Common/Utils/TestConstants.cs1namespace ModelContextProtocol.Tests.Utils;COMMENT
LOW…rotocol.TestOAuthServer/AuthorizationServerMetadata.cs41 /// Gets or sets the grant types supported by this server.COMMENT
LOW…sts/ModelContextProtocol.TestOAuthServer/ClientInfo.cs21 /// Gets or sets the client secret.COMMENT
LOW…ntextProtocol.TestOAuthServer/AuthorizationCodeInfo.cs21 /// Gets or sets the code challenge associated with this authorization code (for PKCE).COMMENT
LOW…ContextProtocol.TestOAuthServer/OAuthServerMetadata.cs41 /// Gets or sets the registration endpoint URL for dynamic client registration.COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/TokenInfo.cs21 /// Gets or sets the issued time of this token.COMMENT
LOW…xtProtocol.TestOAuthServer/JagTokenExchangeResponse.cs1using System.Text.Json.Serialization;COMMENT
LOW…tProtocol.TestOAuthServer/ClientRegistrationRequest.cs41 /// Gets or sets the URL of the client's home page.COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/Program.cs61 /// <summary>COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/Program.cs81 public bool ClientIdMetadataDocumentSupported { get; set; } = true;COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/Program.cs101 /// </remarks>COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/Program.cs121 /// </summary>COMMENT
LOWtests/ModelContextProtocol.TestOAuthServer/Program.cs141 /// <summary>Gets the number of authorization-code token exchange requests received.</summary>COMMENT
LOW.github/workflows/release.yml1# Publish new package versions of ModelContextProtocolCOMMENT
LOW.github/workflows/codeql.yml41 # Use `c-cpp` to analyze code written in C, C++ or bothCOMMENT
LOW.github/workflows/codeql.yml61 with:COMMENT
LOW…Protocol.Extensions.Apps/Server/McpUiToolVisibility.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOW…ontextProtocol.Extensions.Apps/Server/McpUiToolMeta.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOW…ontextProtocol.Extensions.Apps/Server/McpUiToolMeta.cs21 /// </summary>COMMENT
LOW…xtProtocol.Extensions.Apps/Server/McpAppUiAttribute.cs1using ModelContextProtocol.Protocol;COMMENT
LOW…xtProtocol.Extensions.Apps/Server/McpAppUiAttribute.cs21/// </para>COMMENT
LOW…xtProtocol.Extensions.Apps/Server/McpAppUiAttribute.cs41 /// Gets or sets the URI of the UI resource associated with this tool.COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs1using ModelContextProtocol.Protocol;COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs21/// the connected client supports the MCP Apps extension.COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs41 /// <summary>COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs61 private static JsonSerializerOptions CreateSerializerOptions()COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs121 /// <param name="appUi">The UI metadata to apply.</param>COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs201 /// For each tool that has a <see cref="McpAppUiAttribute"/> in its <see cref="McpServerTool.Metadata"/>,COMMENT
LOW…ModelContextProtocol.Extensions.Apps/Server/McpApps.cs221 }COMMENT
LOW…col.Extensions.Apps/Server/McpUiResourcePermissions.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOW…extProtocol.Extensions.Apps/Server/McpUiResourceCsp.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOW…extProtocol.Extensions.Apps/Server/McpUiResourceCsp.cs21{COMMENT
LOW…xtProtocol.Extensions.Apps/Server/McpUiResourceMeta.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOW…xtProtocol.Extensions.Apps/Server/McpUiResourceMeta.cs21 /// Specifies the allowed origins for network requests, resource loads, and nested frames.COMMENT
LOW…col.Extensions.Apps/Server/McpAppsBuilderExtensions.cs21 /// <para>COMMENT
LOW…ocol.Extensions.Apps/Server/McpUiClientCapabilities.cs1using System.Diagnostics.CodeAnalysis;COMMENT
LOWsrc/ModelContextProtocol.Core/McpJsonUtilities.cs21 /// </para>COMMENT
LOW…ModelContextProtocol.Core/ProgressNotificationValue.cs1namespace ModelContextProtocol;COMMENT
LOWsrc/ModelContextProtocol.Core/McpException.cs1using ModelContextProtocol.Protocol;COMMENT
LOWsrc/ModelContextProtocol.Core/McpException.cs21///COMMENT
758 more matches not shown…
Structural Annotation Overuse58 hits · 93 pts
SeverityFileLineSnippetContext
LOWsamples/ProtectedMcpServer/README.md21### Step 1: Start the Test OAuth ServerCOMMENT
LOWsamples/ProtectedMcpServer/README.md32### Step 2: Start the Protected MCP ServerCOMMENT
LOWsamples/ProtectedMcpServer/README.md43### Step 3: Test with Protected MCP ClientCOMMENT
LOWsamples/ProtectedMcpClient/README.md21### Step 1: Start the Test OAuth ServerCOMMENT
LOWsamples/ProtectedMcpClient/README.md32### Step 2: Start the Protected MCP ServerCOMMENT
LOWsamples/ProtectedMcpClient/README.md43### Step 3: Run the Protected MCP ClientCOMMENT
LOW.github/skills/breaking-changes/SKILL.md25### Step 1: Examine Every PRCOMMENT
LOW⚡.github/skills/breaking-changes/SKILL.md38### Step 2: Assess ImpactCOMMENT
LOW⚡.github/skills/breaking-changes/SKILL.md47### Step 3: Reconcile LabelsCOMMENT
LOW⚡.github/skills/breaking-changes/SKILL.md56### Step 4: Present ResultsCOMMENT
LOW.github/skills/publish-release/SKILL.md19### Step 0: Sync With UpstreamCOMMENT
LOW.github/skills/publish-release/SKILL.md32### Step 1: Identify the Prepare-Release PRCOMMENT
LOW.github/skills/publish-release/SKILL.md44### Step 2: Determine Version and Commit RangeCOMMENT
LOW.github/skills/publish-release/SKILL.md50### Step 3: Check for Additional PRsCOMMENT
LOW.github/skills/publish-release/SKILL.md76### Step 4: Refresh Release NotesCOMMENT
LOW.github/skills/publish-release/SKILL.md87### Step 5: Review README and Validate Code SamplesCOMMENT
LOW.github/skills/publish-release/SKILL.md123### Step 6: Review SectionsCOMMENT
LOW⚡.github/skills/publish-release/SKILL.md135### Step 7: PreambleCOMMENT
LOW⚡.github/skills/publish-release/SKILL.md143### Step 8: Final AssemblyCOMMENT
LOW⚡.github/skills/publish-release/SKILL.md151### Step 9: Create Draft ReleaseCOMMENT
LOW.github/skills/publish-release/SKILL.md194### Step 10: Watch for PublicationCOMMENT
LOW.github/skills/issue-triage/SKILL.md27### Step 1: Fetch SDK Tier 1 SLA CriteriaCOMMENT
LOW.github/skills/issue-triage/SKILL.md38### Step 2: Fetch All Open IssuesCOMMENT
LOW.github/skills/issue-triage/SKILL.md48### Step 3: Classify Triage StatusCOMMENT
LOW.github/skills/issue-triage/SKILL.md68### Step 4: Identify Issues Needing AttentionCOMMENT
LOW.github/skills/issue-triage/SKILL.md87### Step 5: Deep-Dive Review of Attention ItemsCOMMENT
LOW.github/skills/issue-triage/SKILL.md127### Step 6: Cross-SDK AnalysisCOMMENT
LOW.github/skills/issue-triage/SKILL.md138### Step 7: Generate ReportCOMMENT
LOW.github/skills/issue-triage/SKILL.md148### Step 8: Present SummaryCOMMENT
LOW.github/skills/prepare-release/SKILL.md21### Step 0: Sync With UpstreamCOMMENT
LOW.github/skills/prepare-release/SKILL.md42### Step 1: Select Source BranchCOMMENT
LOW.github/skills/prepare-release/SKILL.md57### Step 2: Determine Target and Gather PRsCOMMENT
LOW.github/skills/prepare-release/SKILL.md80### Step 3: Categorize and AttributeCOMMENT
LOW.github/skills/prepare-release/SKILL.md103### Step 4: Breaking Change AuditCOMMENT
LOW.github/skills/prepare-release/SKILL.md109### Step 5: Assess Release VersionCOMMENT
LOW.github/skills/prepare-release/SKILL.md126### Step 6: Create Release Branch and Bump VersionCOMMENT
LOW.github/skills/prepare-release/SKILL.md139### Step 7: Run API Compatibility CheckCOMMENT
LOW.github/skills/prepare-release/SKILL.md159### Step 8: Generate API Diff ReportCOMMENT
LOW.github/skills/prepare-release/SKILL.md170### Step 9: Review and Update DocumentationCOMMENT
LOW.github/skills/prepare-release/SKILL.md193### Step 10: Draft Release NotesCOMMENT
LOW.github/skills/prepare-release/SKILL.md255### Step 11: Commit ChangesCOMMENT
LOW.github/skills/prepare-release/SKILL.md263### Step 12: Present Release SummaryCOMMENT
LOW.github/skills/prepare-release/SKILL.md294### Step 13: Push Branch and Create Pull RequestCOMMENT
LOW.github/skills/verify-release/SKILL.md30### Step 1: Identify the ReleaseCOMMENT
LOW.github/skills/verify-release/SKILL.md48### Step 2: Locate Both Workflow RunsCOMMENT
LOW.github/skills/verify-release/SKILL.md79### Step 3: Evaluate the Release WorkflowCOMMENT
LOW.github/skills/verify-release/SKILL.md95### Step 4: Evaluate the Publish Docs WorkflowCOMMENT
LOW.github/skills/verify-release/SKILL.md119### Step 5: Confirm the Published PackagesCOMMENT
LOW.github/skills/verify-release/SKILL.md129### Step 6: Confirm the Documentation SiteCOMMENT
LOW.github/skills/verify-release/SKILL.md148### Step 7: ReportCOMMENT
LOW.github/skills/bump-version/SKILL.md17### Step 1: Read Current Version and Previous ReleaseCOMMENT
LOW.github/skills/bump-version/SKILL.md27### Step 2: Assess and Determine Next VersionCOMMENT
LOW.github/skills/bump-version/SKILL.md59### Step 3: Create Pull RequestCOMMENT
LOW.github/skills/bump-version/SKILL.md72### Step 4: ConfirmCOMMENT
LOW⚡….Core/Authentication/IdentityAssertionGrantProvider.cs168 // Step 1: Discover MCP authorization server metadata to find the token endpointCOMMENT
LOW⚡….Core/Authentication/IdentityAssertionGrantProvider.cs176 // Step 2: Call the ID token callback to get the caller's OIDC ID tokenCOMMENT
LOW….Core/Authentication/IdentityAssertionGrantProvider.cs191 // Step 3: RFC 8693 token exchange — ID token → JWT Authorization Grant (JAG) at the enterprise IdPCOMMENT
LOW….Core/Authentication/IdentityAssertionGrantProvider.cs207 // Step 4: RFC 7523 JWT bearer grant — JAG → access token at the MCP authorization serverCOMMENT
Cross-File Repetition9 hits · 45 pts
SeverityFileLineSnippetContext
HIGH…otocol.Tests/Server/Sep2106ListToolsBackCompatTests.cs0{"type":["object","null"],"properties":{"name":{"type":"string"}}}STRING
HIGH…odelContextProtocol.Tests/Server/McpServerToolTests.cs0{"type":["object","null"],"properties":{"name":{"type":"string"}}}STRING
HIGHtests/ModelContextProtocol.Tests/Protocol/ToolTests.cs0{"type":["object","null"],"properties":{"name":{"type":"string"}}}STRING
HIGHsamples/ProtectedMcpServer/Tools/WeatherTools.cs0event: {properties.getproperty("event").getstring()} area: {properties.getproperty("areadesc").getstring()} severity: {pSTRING
HIGHsamples/AspNetCoreMcpServer/Tools/WeatherTools.cs0event: {properties.getproperty("event").getstring()} area: {properties.getproperty("areadesc").getstring()} severity: {pSTRING
HIGHsamples/QuickstartWeatherServer/Tools/WeatherTools.cs0event: {properties.getproperty("event").getstring()} area: {properties.getproperty("areadesc").getstring()} severity: {pSTRING
HIGHsamples/ProtectedMcpServer/Tools/WeatherTools.cs0{period.getproperty("name").getstring()} temperature: {period.getproperty("temperature").getint32()}°f wind: {period.getSTRING
HIGHsamples/AspNetCoreMcpServer/Tools/WeatherTools.cs0{period.getproperty("name").getstring()} temperature: {period.getproperty("temperature").getint32()}°f wind: {period.getSTRING
HIGHsamples/QuickstartWeatherServer/Tools/WeatherTools.cs0{period.getproperty("name").getstring()} temperature: {period.getproperty("temperature").getint32()}°f wind: {period.getSTRING
Decorative Section Separators8 hits · 24 pts
SeverityFileLineSnippetContext
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs24 // ──── A1: Basic Elicitation ─────────────────────────────────────────────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs55 // ──── A2: Basic Sampling ────────────────────────────────────────────────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs85 // ──── A3: Basic ListRoots ───────────────────────────────────────────────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs104 // ──── B1: requestState round-trip ───────────────────────────────────────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs139 // ──── B2: Multiple input requests in one round ──────────────────────────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs181 // ──── B3: Multi-round (R1 -> incomplete, R2 -> incomplete (new state), R3 -> complete) ─────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs268 // ──── A12: Tampered requestState rejection (integrity protection) ───────COMMENT
MEDIUM…tocol.ConformanceServer/Tools/IncompleteResultTools.cs310 // ──── A13: Respect client capabilities ──────────────────────────────────COMMENT
Synthetic Comment Markers3 hits · 22 pts
SeverityFileLineSnippetContext
HIGH…xtProtocol.Core/Protocol/CreateMessageRequestParams.cs37 /// Gets or sets the maximum number of tokens to generate in the LLM response, as requested by the server.COMMENT
HIGH…xtProtocol.Core/Protocol/CreateMessageRequestParams.cs127 /// Gets or sets the temperature to use for sampling, as requested by the server.COMMENT
HIGHsrc/ModelContextProtocol.Core/Protocol/PromptMessage.cs50 /// messages represent responses generated by AI models.COMMENT
Hallucination Indicators3 hits · 20 pts
SeverityFileLineSnippetContext
CRITICAL…rotocol.AspNetCore.Tests/HttpHeaderConformanceTests.cs74 TypeInfoResolver = new System.Text.Json.Serialization.Metadata.DefaultJsonTypeInfoResolver()CODE
CRITICAL…delContextProtocol.AspNetCore.Tests/OAuth/AuthTests.cs2015 proxyRequest.Content.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse(coSTRING
CRITICAL…delContextProtocol.AspNetCore.Tests/OAuth/AuthTests.cs2117 proxyRequest.Content.Headers.ContentType = System.Net.Http.Headers.MediaTypeHeaderValue.Parse(coSTRING
Fake / Example Data18 hits · 17 pts
SeverityFileLineSnippetContext
LOW…otocol.Tests/Server/Sep2106ListToolsBackCompatTests.cs350 WorkPhones = [new() { Number = "555-0100", Type = "work" }],CODE
LOW…otocol.Tests/Server/Sep2106ListToolsBackCompatTests.cs351 HomePhones = [new() { Number = "555-0200", Type = "home" }],CODE
LOW…lContextProtocol.Tests/Server/McpMetaAttributeTests.cs218 var attr = new McpMetaAttribute("key", "placeholder")CODE
LOW…ontextProtocol.Tests/Protocol/ElicitationTypedTests.cs381 string Name = "John Doe",STRING
LOW…ontextProtocol.Tests/Protocol/ElicitationTypedTests.cs414 Assert.Equal("John Doe", nameSchema.Default);STRING
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs16 Default = "John Doe"CODE
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs26 Assert.Equal("John Doe", stringSchema.Default);CODE
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs164 Default = "user@example.com"CODE
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs174 Assert.Equal("user@example.com", stringSchema.Default);CODE
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs319 Default = "John Doe"CODE
LOW…otocol.Tests/Protocol/ElicitationDefaultValuesTests.cs392 Assert.Equal("John Doe", nameSchema.Default);CODE
LOW…tocol.Tests/Protocol/ElicitationClientDefaultsTests.cs23 ["name"] = new ElicitRequestParams.StringSchema { Description = "Name", Default = "John Doe" },CODE
LOW…tocol.Tests/Protocol/ElicitationClientDefaultsTests.cs58 Assert.Equal("John Doe", rawResult.Content["name"].GetString());CODE
LOW…tocol.Tests/Protocol/ElicitationClientDefaultsTests.cs84 Assert.Equal("John Doe", rawResult.Content["name"].GetString());CODE
LOW…tocol.Tests/Protocol/ElicitationServerDefaultsTests.cs19 ["name"] = new ElicitRequestParams.StringSchema { Description = "Name", Default = "John Doe" },CODE
LOW…tocol.Tests/Protocol/ElicitationServerDefaultsTests.cs53 Assert.Equal("John Doe", result.Content["name"].GetString());CODE
LOW…tocol.Tests/Protocol/ElicitationServerDefaultsTests.cs83 Assert.Equal("John Doe", result.Content["name"].GetString());CODE
LOW…xtProtocol.ConformanceServer/Tools/ConformanceTools.cs269 Default = "John Doe"CODE
AI Slop Vocabulary4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUM….Tests/Transport/HttpClientTransportAutoDetectTests.cs335 // We don't pin the exact exception type so this stays robust to future error-shape tweaks,COMMENT
MEDIUMsrc/ModelContextProtocol.Core/AIContentExtensions.cs270 /// content types, enabling seamless integration between the protocol and AI client libraries.COMMENT
MEDIUMsrc/ModelContextProtocol.Core/AIContentExtensions.cs316 /// content types, enabling seamless integration between the protocol and AI client libraries.COMMENT
MEDIUM…c/ModelContextProtocol.Core/Protocol/RequestMethods.cs92 /// This request allows servers to utilize an LLM available on the client side to generate text or image responsesCOMMENT
Modern AI Meta-Vocabulary4 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMdocs/concepts/getting-started.md30> You can also use the [MCP Server project template](https://learn.microsoft.com/dotnet/ai/quickstarts/build-mcp-server)CODE
MEDIUMdocs/concepts/progress/progress.md25The C# SDK registers an instance of <xref:ModelContextProtocol.Server.McpServer> with the dependency injection containerCODE
MEDIUMdocs/concepts/elicitation/elicitation.md20The C# SDK registers an instance of <xref:ModelContextProtocol.Server.McpServer> with the dependency injection containerCODE
MEDIUM.github/workflows/docs.yml53 # orchestration scripts and picker assets current with main.COMMENT
Slop Phrases3 hits · 8 pts
SeverityFileLineSnippetContext
MEDIUM…lContextProtocol.Tests/Protocol/ImplementationTests.cs17 Description = "A test MCP server implementation for demonstration purposes",CODE
MEDIUM…les/AspNetCoreMcpPerSessionTools/Tools/UserInfoTool.cs15 // Dummy user information for demonstration purposesCOMMENT
MEDIUM.github/workflows/codeql.yml46 # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize howCOMMENT
Verbosity Indicators4 hits · 8 pts
SeverityFileLineSnippetContext
LOW⚡….Core/Authentication/IdentityAssertionGrantProvider.cs168 // Step 1: Discover MCP authorization server metadata to find the token endpointCOMMENT
LOW⚡….Core/Authentication/IdentityAssertionGrantProvider.cs176 // Step 2: Call the ID token callback to get the caller's OIDC ID tokenCOMMENT
LOW….Core/Authentication/IdentityAssertionGrantProvider.cs191 // Step 3: RFC 8693 token exchange — ID token → JWT Authorization Grant (JAG) at the enterprise IdPCOMMENT
LOW….Core/Authentication/IdentityAssertionGrantProvider.cs207 // Step 4: RFC 7523 JWT bearer grant — JAG → access token at the MCP authorization serverCOMMENT
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…ContextProtocol.Core/Server/McpServerRequestHandler.cs20public sealed class McpServerRequestHandlerCODE