Statically audit an MCP server's blast radius before installation.
Statically audit MCP server access scope and detect manifest declaration mismatches.
