@modelcontextprotocol/inspector

MCP Inspector by Model Context Protocol

The Model Context Protocol Inspector

Live Registry Versionv2.12.0Previous: v1.0.3Published 2026-10-21

Stability Grade

C+ (74/100)

90-Day Velocity

17 releases

High release cadence

Dependencies

22 direct

NPM manifest

License

SEE LICENSE IN LICENSE

Verified on NPM

Recommended Exact Pin: npx -y @modelcontextprotocol/inspector@2.12.0

NPM Registry ->GitHub Repo ->

TL;DR Verdict & Quick Citation Summary (2026-10-24)Source: AgentBreakWatch Live NPM Index

MCP Inspector (@modelcontextprotocol/inspector) is currently at v2.12.0 on NPM (published 2026-10-21), with a 90-day stability score of 74/100 (C+) and HIGH schema drift risk across 17 releases in the past 90 days. v2.x requires session token authentication by default on proxy server port 6277 to prevent DNS rebinding / local RCE. Production teams should pin npx -y @modelcontextprotocol/inspector@2.12.0 rather than using unpinned @latest tags.

Breaking Changes & Tool Schema Drift Analysis

v2.x requires session token authentication by default on proxy server port 6277 to prevent DNS rebinding / local RCE.

Watched Exports / MCP Tool Signatures:

mcp-inspectorMCP_PROXY_AUTH_TOKEN

Before (Deprecated / Unpinned Pattern)

npx @modelcontextprotocol/inspector node build/index.js

After (Verified v2.12.0 Pattern)

DANGEROUSLY_OMIT_AUTH=true npx @modelcontextprotocol/inspector node build/index.js
# Or use the printed MCP_PROXY_AUTH_TOKEN URL

Frequently Asked Questions: @modelcontextprotocol/inspector

What is the latest version of @modelcontextprotocol/inspector on NPM?

As of 2026-10-24, the latest stable version of @modelcontextprotocol/inspector (MCP Inspector by Model Context Protocol) on NPM is v2.12.0, published on 2026-10-21. It has shipped 17 releases in the last 90 days.

Does @modelcontextprotocol/inspector v2.12.0 have breaking changes or MCP schema drift risk?

@modelcontextprotocol/inspector currently carries a HIGH schema drift risk rating with a Stability Score of 74/100 (Grade C+). v2.x requires session token authentication by default on proxy server port 6277 to prevent DNS rebinding / local RCE.

How do I safely pin @modelcontextprotocol/inspector in production?

Avoid unpinned @latest tags in production agent configs. Pin the exact verified version using `npx -y @modelcontextprotocol/inspector@2.12.0` and monitor mcp-inspector, MCP_PROXY_AUTH_TOKEN for parameter or schema changes.

30-Min Registry & Schema Poller

Get Instant Breaking-Change Alerts for @modelcontextprotocol/inspector

We poll NPM and modelcontextprotocol/inspector every 30 minutes. Get an email with the exact diff when @modelcontextprotocol/inspector ships a breaking release beyond v2.12.0.