# MCP Inspector (@modelcontextprotocol/inspector) - AgentBreakWatch Reference

> TL;DR Verdict: MCP Inspector (`@modelcontextprotocol/inspector`) is currently at v2.12.0 on NPM (published 2026-10-21), with a 90-day Stability Score of 74/100 (C+) and HIGH schema drift risk across 17 releases in the last 90 days. v2.x requires session token authentication by default on proxy server port 6277 to prevent DNS rebinding / local RCE.

## Live Telemetry Metadata
- Canonical Page: https://agentbreakwatch.vercel.app/p/mcp-inspector
- Category Hub: https://agentbreakwatch.vercel.app/c/mcp-bridges-devtools (MCP Bridges, Transports, Inspectors & Developer Tools)
- Package Name: `@modelcontextprotocol/inspector`
- Registry: NPM (https://www.npmjs.com/package/@modelcontextprotocol/inspector)
- GitHub Repository: https://github.com/modelcontextprotocol/inspector
- Vendor: Model Context Protocol
- Latest Live Version: v2.12.0
- Published Date: 2026-10-21T18:35:58.828Z
- 90-Day Release Count: 17
- Direct Dependencies: 22
- License: SEE LICENSE IN LICENSE
- Stability Score: 74/100 (Grade C+)
- Schema Drift Risk: HIGH
- Recommended Exact Pin Command: `npx -y @modelcontextprotocol/inspector@2.12.0`
- Watched Symbols / MCP Tools: mcp-inspector, MCP_PROXY_AUTH_TOKEN
- Snapshot Timestamp: 2026-10-24T12:11:27.697Z

## Breaking Change & Schema Drift Summary
v2.x requires session token authentication by default on proxy server port 6277 to prevent DNS rebinding / local RCE.

## Migration Diff: Before (Deprecated / Unpinned Pattern)
```
npx @modelcontextprotocol/inspector node build/index.js
```

## Migration Diff: After (Verified v2.12.0 Pattern)
```
DANGEROUSLY_OMIT_AUTH=true npx @modelcontextprotocol/inspector node build/index.js
# Or use the printed MCP_PROXY_AUTH_TOKEN URL
```

## Recent Verified Releases
- v2.12.0 (published 2026-10-21) [LATEST]
- v1.0.3 (published 2026-10-21)
- v2.11.0 (published 2026-10-14)
- v2.10.1 (published 2026-10-08)
- v2.10.0 (published 2026-10-07)
- v2.9.0 (published 2026-09-30)