INTERACTIVE CHECKLIST

MCP Server Production Readiness

Use this as a practical engineering review before shipping. Progress is stored locally in your browser.

Tool Design

Clear ownership and documented purposeProduction configuration separated from source codeSecrets kept out of source controlInput validation implemented

Schemas

Failure paths testedAutomated tests cover critical behaviorDependencies pinned and reviewedStructured logging enabled

Permissions

Health/readiness checks availableTimeouts defined for external callsRetries use bounded backoffLeast-privilege access applied

Secrets

Sensitive data handling documentedDeployment process is repeatableRollback path is documentedAlerts exist for critical failures

Validation

Performance baseline measuredResource limits consideredOperational runbook availableREADME explains deployment and support

Failure Handling

Failure Handling: clear ownership and documented purposeFailure Handling: production configuration separated from source codeFailure Handling: secrets kept out of source controlFailure Handling: input validation implemented

Logging

Logging: failure paths testedLogging: automated tests cover critical behaviorLogging: dependencies pinned and reviewedLogging: structured logging enabled

Auditability

Auditability: health/readiness checks availableAuditability: timeouts defined for external callsAuditability: retries use bounded backoffAuditability: least-privilege access applied

Security

Security: sensitive data handling documentedSecurity: deployment process is repeatableSecurity: rollback path is documented

Testing

Deployment

This checklist is a development-readiness aid. It does not replace professional security, compliance, legal, safety, or architecture review.

Calculate AfterCode Score