Example Report· Swagger Petstore · Read-only
MCPForge

Security & Agent Readiness Assessment

for MCP Deployment Reviews

API

Swagger Petstore (OpenAPI 3.0)

Server

swagger-petstore-demo

Generated

June 15, 2026

Security Review ReadyGovernance Review ReadyExample Report

1. Executive Summary

75

Good

Security Score

89

Good

Tool Quality Score

19

3 disabled

Tools Analyzed

🟢

6

Read-only

🟡

10

Side Effect

🔴

3

Critical / Blocked

2. Deployment Recommendation

Current Status

Development Ready

Production Status

Requires: Credentials Vault, Approval Workflows

Suitable for development and testing use

Configure Credentials Vault before production deployment

Enable Approval Workflows for destructive operations

All 3 critical DELETE tools disabled by default

3. Security Recommendations

High Priority

Configure Credentials Vault to prevent API key exposure to AI agents

+15 pts

Require approval for all billing and auth endpoints

+15 pts
Medium Priority

Enable Approval Workflows for destructive operations

+10 pts

Review auth endpoint access (loginUser, logoutUser)

+10 pts

4. Tool Classification

ToolTypeRiskQualityStatus
getPetByIdRead-onlyLOWExcellentEnabled
findPetsByStatusRead-onlyLOWExcellentEnabled
findPetsByTagsRead-onlyLOWGoodEnabled
getInventoryRead-onlyLOWGoodEnabled
getOrderByIdRead-onlyLOWExcellentEnabled
getUserByNameRead-onlyLOWGoodEnabled
logoutUserSide EffectMEDIUMExcellentEnabled
loginUserRead-onlyMEDIUMGoodEnabled
addPetSide EffectMEDIUMGoodEnabled
updatePetSide EffectMEDIUMGoodEnabled
placeOrderSide EffectMEDIUMGoodEnabled
createUserSide EffectMEDIUMGoodEnabled
updateUserSide EffectMEDIUMGoodEnabled
uploadFileSide EffectMEDIUMFairEnabled
updatePetWithFormSide EffectMEDIUMGoodEnabled
createUsersWithListSide EffectMEDIUMFairEnabled
deletePetCriticalHIGHGoodDisabled
deleteOrderCriticalHIGHGoodDisabled
deleteUserCriticalHIGHGoodDisabled

5. Security Controls

Governance Coverage

3 / 5 Controls

Maturity

Moderate

60% of governance controls enabled

Tool Permissions✓ Configured
Approval Workflows✕ Not Configured
Credentials Vault✕ Not Configured
Audit Logs✓ Configured
Side Effect Detection✓ Configured

Generated by MCPForge

Security & Agent Readiness Review · June 15, 2026 · Example Report

Suitable For

Security Reviews

IAM Reviews

MCP Deployment Reviews

Governance Approvals

Production Readiness Assessments

Generate a report for your own API

Import your OpenAPI spec and get a Security & Agent Readiness Report in seconds.

Analyze My API →← Back to Demo