# MCP metadata inspection: sentry

Endpoint: https://mcp.sentry.dev/mcp
Official source: https://mcp.sentry.dev/ (reviewed 2026-10-15)
Documented profile: OAuth and account required; this inspection supplies no credentials
Observed: 2026-10-15T07:14:22.147Z
Run: 5626c1ca-8f7f-43ed-9b93-7f88dc496774 (incomplete)
Protocol: requested 2025-11-25; server reported not established; negotiated not established
Coverage: 1/5 checks attempted; 0 passed, 0 failed, 1 unknown, 4 not tested, 0 not applicable.
Catalog: 0 observed tools; not-observed. SHA-256: not observed.

- **protocol-negotiation: unknown**. Authentication is required. This anonymous inspection did not test protected metadata or OAuth login.
- **initialized-notification: not-tested**. Initialization notification was not sent.
- **tool-catalog: not-tested**. The tool catalog was not inspected.
- **tool-metadata-shape: not-tested**. Basic metadata shape was not inspected; this is not complete JSON Schema validation.
- **oauth-login: not-tested**. OAuth discovery, login, token refresh and authenticated access are outside this anonymous inspection.

- metadata: **unknown**
- authenticatedExecution: **not-tested**
- modelApi: **not-tested**
- chatgptHost: **not-tested**
- claudeHost: **not-tested**
- publicationApproval: **not-tested**

Tool executions: **0**. This report contains metadata observations only.

- Metadata-only anonymous inspection. No tools/call, OAuth flow, API model calls, host UI or publication review was executed. No global quality or safety score is produced.
- Annotations are server declarations, not verified behavior. Metadata success does not establish task success, security, usefulness or ChatGPT/Claude compatibility.
- Only active exact HTTPS endpoints in the reviewed source registry are accepted. Redirects, supplied credentials, arbitrary endpoints and OAuth URL fetching are disabled. DNS/TLS use the local runtime: this is not a hardened multi-tenant SSRF sandbox and must not be exposed as a public scanner.
- Session identifiers are used only in memory. Request/response headers, raw error messages, raw descriptions and schemas are excluded from artifacts. Tool names and aggregate metadata remain untrusted server input.
- Only the recorded protocol versions and bounded catalog prefix are supported. Reaching a bound or lacking access means unknown, not a failed server or a passing full audit.