Review evidence

pulumi/docs PR #21210 2bb20176cb generated 2026-10-08T22:15:19Z

Verification trail

#3 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:23
url: "https://developer.hashicorp.com/terraform/mcp-server"
framing: The URL claim only asserts that the link resolves to the Terraform MCP server page, and the page title confirms that.; evidence: The cited URL returns HTTP 200, and the page title is "Terraform MCP server overview | Terraform | HashiCorp Developer", so the link is live and goes to HashiCorp's Terraform MCP server docs.; source: https://developer.hashicorp.com/terraform/mcp-server
source: https://developer.hashicorp.com/terraform/mcp-server
framing: exact-match — The URL claim only asserts that the link resolves to the Terraform MCP server page, and the page title confirms that.
pass2 · url · high confidence
#4 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:25
url: "https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview"
framing: This is a link-only claim. The page's title matches the topic the link is used for: the Vault MCP server.; evidence: The cited URL returns HTTP 200, and the page title is "What is the Vault MCP server? | Vault | HashiCorp Developer". That confirms the link is live and points to HashiCorp's official Vault MCP server overview.; source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
framing: exact-match — This is a link-only claim. The page's title matches the topic the link is used for: the Vault MCP server.
pass2 · url · high confidence
#5 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:27
url: "https://awslabs.github.io/mcp/"
framing: URL claim: the link resolves to the intended AWS MCP servers landing page.; evidence: The URL returns HTTP 200 and serves the AWS Labs MCP servers site: "Welcome to Open Source MCP Servers for AWS ... Open source MCP servers for AWS are a suite of specialized MCP servers that help you get the most out of AWS".; source: https://awslabs.github.io/mcp/
source: https://awslabs.github.io/mcp/
framing: exact-match — URL claim: the link resolves to the intended AWS MCP servers landing page.
pass2 · url · high confidence
#6 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:29
url: "https://learn.microsoft.com/azure/developer/azure-mcp-server"
framing: The link is live and goes to the official Azure MCP Server docs, as its use in the post intends.; evidence: The URL returns HTTP 200 and loads the Azure MCP Server documentation page: "Azure MCP Server documentation ... Learn how to use the Azure MCP Server to manage Azure resources through natural language commands."; source: https://learn.microsoft.com/azure/developer/azure-mcp-server
source: https://learn.microsoft.com/azure/developer/azure-mcp-server
framing: exact-match — The link is live and goes to the official Azure MCP Server docs, as its use in the post intends.
pass2 · url · high confidence
#7 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:31
url: "https://github.com/containers/kubernetes-mcp-server"
evidence: The cited URL returns HTTP 200, and the page title is "containers/kubernetes-mcp-server: Model Context Protocol (MCP) server for Kubernetes and OpenShift". The link is live and points to a Kubernetes MCP server, as the blog post says.; source: https://github.com/containers/kubernetes-mcp-server
source: https://github.com/containers/kubernetes-mcp-server
framing: exact-match
pass2 · url · high confidence
#8 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:33
url: "https://fluxcd.control-plane.io/mcp/"
framing: The link resolves through a redirect, so it isn't broken. Consider updating it to the canonical URL https://fluxoperator.dev/mcp-server/.; evidence: The cited URL returns HTTP 200 with a redirect stub: "Redirecting to: https://fluxoperator.dev/mcp-server/ Redirecting from /mcp/ to https://fluxoperator.dev/mcp-server/". The link still works, but it now points to the Flux Operator MCP…; source: https://fluxcd.control-plane.io/mcp/
source: https://fluxcd.control-plane.io/mcp/
framing: exact-match — The link resolves through a redirect, so it isn't broken. Consider updating it to the canonical URL https://fluxoperator.dev/mcp-server/.
pass2 · url · medium confidence
#9 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:35
url: "https://github.com/github/github-mcp-server"
framing: URL claim: the link resolves to GitHub's official MCP server repo.; evidence: The cited URL returns HTTP 200, and the page title is "GitHub - github/github-mcp-server: GitHub's official MCP Server", so the link is live and points to the expected repo.; source: https://github.com/github/github-mcp-server
source: https://github.com/github/github-mcp-server
framing: exact-match — URL claim: the link resolves to GitHub's official MCP server repo.
pass2 · url · high confidence
#10 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:37
url: "https://docs.docker.com/ai/mcp-catalog-and-toolkit/"
framing: This is a URL claim. The live page title matches the expected Docker MCP Catalog and Toolkit page.; evidence: The cited URL returns HTTP 200, and the page title is "Docker MCP Catalog and Toolkit | Docker Docs", so the link is live and points to the Docker MCP Catalog and Toolkit docs.; source: https://docs.docker.com/ai/mcp-catalog-and-toolkit/
source: https://docs.docker.com/ai/mcp-catalog-and-toolkit/
framing: exact-match — This is a URL claim. The live page title matches the expected Docker MCP Catalog and Toolkit page.
pass2 · url · high confidence
#11 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:39
url: "https://grafana.com/docs/grafana/latest/developer-resources/mcp/"
framing: This is a URL-only claim: the link works and goes to the Grafana MCP server docs.; evidence: The cited URL returns HTTP 200 and the page title is "Open source Grafana MCP server | Grafana documentation", so it is a live page about the Grafana MCP server.; source: https://grafana.com/docs/grafana/latest/developer-resources/mcp/
source: https://grafana.com/docs/grafana/latest/developer-resources/mcp/
framing: exact-match — This is a URL-only claim: the link works and goes to the Grafana MCP server docs.
pass2 · url · high confidence
#12 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:41
url: "https://docs.datadoghq.com/mcp_server/"
framing: The claim only says the link resolves; the HTTP 200 confirms that. The page content couldn't be checked because the body arrived compressed.; evidence: The cited URL returned HTTP 200, so the link works. The pre-fetched body was still compressed and couldn't be read, so I couldn't quote it to confirm the page is Datadog's MCP Server docs. The domain and path…; source: https://docs.datadoghq.com/mcp_server/
source: https://docs.datadoghq.com/mcp_server/
framing: exact-match — The claim only says the link resolves; the HTTP 200 confirms that. The page content couldn't be checked because the body arrived compressed.
pass2 · url · medium confidence
#13 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:43
url: "https://github.com/pagerduty/pagerduty-mcp-server"
framing: The link resolves to the PagerDuty MCP server repo it points to.; evidence: The URL returns HTTP 200 and goes to PagerDuty's official repo. The page title reads: "PagerDuty/pagerduty-mcp-server: PagerDuty's official local MCP (Model Context Protocol) server which provides tools to interact with your PagerDuty…; source: https://github.com/pagerduty/pagerduty-mcp-server
source: https://github.com/pagerduty/pagerduty-mcp-server
framing: exact-match — The link resolves to the PagerDuty MCP server repo it points to.
pass2 · url · high confidence
#15 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:51
MCP servers went from novelty to default in about a year; every hyperscaler, most CI/CD and observability vendors, and the two biggest IaC ecosystems now…
evidence: (escalated from pass1) The anchor facts check out. AWS, Azure, and Google Cloud all ship official MCP servers; ChatForest says that "By early 2026, every major cloud provider chose the latter" (meaning they adopted MCP). HashiCorp has an…; source: https://chatforest.com/guides/mcp-cloud-providers-aws-azure-gcp/ ; https://www.infoworld.com/article/4096223/10-mcp-servers-for-devops.html ; https://fast.io/resources/best-mcp-servers-for-cloud-infrastructure/; intuition: MCP was open-sourced in November 2024, about 23 months before today (October 2026). "About a year" could be read as…
source: https://chatforest.com/guides/mcp-cloud-providers-aws-azure-gcp/ ; https://www.infoworld.com/article/4096223/10-mcp-servers-for-devops.html ; https://fast.io/resources/best-mcp-servers-for-cloud-infrastructure/
pass3 · temporal · medium confidence
#16 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:79
The Model Context Protocol (MCP) is an open standard for connecting AI applications to external tools and data.
framing: The cited page says "external tools," and the official docs it quotes say "external systems." The claim's "external tools and data" fits within "external…; evidence: The cited page (L11) says MCP is "an open standard for connecting AI applications to external tools," and (L19) quotes the official MCP docs: "MCP (Model Context Protocol) is an open-source standard for connecting AI applications to…; source: repo:content/what-is/mcp-for-infrastructure-as-code.md (L11, L19, quoting https://modelcontextprotocol.io/introduction)
source: repo:content/what-is/mcp-for-infrastructure-as-code.md (L11, L19, quoting https://modelcontextprotocol.io/introduction)
framing: entailed-narrower — The cited page says "external tools," and the official docs it quotes say "external systems." The claim's "external tools and data" fits within "external systems."
pass1 · url · medium confidence
#17 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:79
The page /what-is/mcp-for-infrastructure-as-code/ exists and covers MCP for infrastructure as code including Pulumi's own server.
evidence: I found the file content/what-is/mcp-for-infrastructure-as-code.md in the repo. Its title is "MCP for Infrastructure as Code: What It Means for Pulumi Users", and it has a section called "How does Pulumi's MCP server work?" that covers…; source: repo:content/what-is/mcp-for-infrastructure-as-code.md
source: repo:content/what-is/mcp-for-infrastructure-as-code.md
framing: exact-match
pass1 · url · high confidence
#18 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:81
The Agentic AI Foundation was co-founded by Anthropic, Block, and OpenAI, with Google, Microsoft, AWS, Cloudflare, and Bloomberg as supporting members.
framing: The source says "with support from" and the claim says "as supporting members". The two phrasings mean essentially the same thing, though "members" sounds a…; evidence: The cited Anthropic post says: "The Agentic AI Foundation (AAIF) is a directed fund under the Linux Foundation co-founded by Anthropic, Block and OpenAI, with support from Google, Microsoft, AWS, Cloudflare and Bloomberg."; source: https://www.anthropic.com/news/donating-the-model-context-protocol-and-establishing-of-the-agentic-ai-foundation
source: https://www.anthropic.com/news/donating-the-model-context-protocol-and-establishing-of-the-agentic-ai-foundation
framing: exact-match — The source says "with support from" and the claim says "as supporting members". The two phrasings mean essentially the same thing, though "members" sounds a bit more formal than the source's wording.
pass2 · entity-spec · high confidence
#19 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:81
Google, Microsoft, AWS, Cloudflare, and Bloomberg are supporting members of the Agentic AI Foundation.
framing: "Supporting members" is not an official AAIF membership tier. The official tier is Platinum. The wording follows Anthropic's "with support from" phrasing.; evidence: Anthropic's announcement calls the AAIF "co-founded by Anthropic, Block and OpenAI, with support from Google, Microsoft, AWS, Cloudflare and Bloomberg." The Linux Foundation press release adds that all five are platinum members…; source: https://www.anthropic.com/news/donating-the-model-context-protocol-and-establishing-of-the-agentic-ai-foundation ; https://www.linuxfoundation.org/press/linux-foundation-announces-the-formation-of-the-agentic-ai-foundation
source: https://www.anthropic.com/news/donating-the-model-context-protocol-and-establishing-of-the-agentic-ai-foundation ; https://www.linuxfoundation.org/press/linux-foundation-announces-the-formation-of-the-agentic-ai-foundation
framing: "Supporting members" is not an official AAIF membership tier. The official tier is Platinum. The wording follows Anthropic's "with support from" phrasing.
pass3 · entity-spec · high confidence
#21 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:81
The official MCP Registry is still in public preview and does not yet publish categories.
framing: The README confirms the preview status. That categories are missing is inferred because no categories feature turned up; no source states it outright.; evidence: The modelcontextprotocol/registry README still describes the registry as a preview: "this is still a preview release and breaking changes or data resets may occur. A general availability (GA) release will follow later." The latest status…; source: gh api repos/modelcontextprotocol/registry/readme; gh search issues --repo modelcontextprotocol/registry categories
source: gh api repos/modelcontextprotocol/registry/readme; gh search issues --repo modelcontextprotocol/registry categories
framing: entailed-narrower — The README confirms the preview status. That categories are missing is inferred because no categories feature turned up; no source states it outright.
pass1 · temporal · medium confidence
#23 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:90
Stdio transport confines an MCP server to one machine, while Streamable HTTP makes it network-reachable and needs its own auth and network controls.
framing: Minor nuance: the spec also lets a Streamable HTTP server bind to localhost only, so it is network-reachable only if deployed that way. The claim's general…; evidence: (escalated from pass1) The MCP spec defines stdio (the client launches the server as a subprocess) and Streamable HTTP, in which "the server operates as an independent process that can handle multiple client connections." Secondary…; source: https://modelcontextprotocol.io/specification/2025-03-26/basic/transports; https://www.matthewswong.com/en/blog/mcp-transports-stdio-vs-http/
source: https://modelcontextprotocol.io/specification/2025-03-26/basic/transports; https://www.matthewswong.com/en/blog/mcp-transports-stdio-vs-http/
framing: Minor nuance: the spec also lets a Streamable HTTP server bind to localhost only, so it is network-reachable only if deployed that way. The claim's general description still holds.
pass3 · behavior · medium confidence
#24 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:93
HashiCorp's Vault MCP server carries a beta label, which is the vendor telling users not to point it at production yet.
framing: The claim's 'telling users not to point it at production yet' is a fair paraphrase of the docs' 'strongly discourage using beta features in production…; evidence: HashiCorp's Vault MCP server docs page shows a "Beta feature" banner that says: "We strongly discourage using beta features in production deployments of Vault." So both the beta label and the warning against production use come straight…; source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
framing: exact-match — The claim's 'telling users not to point it at production yet' is a fair paraphrase of the docs' 'strongly discourage using beta features in production deployments.'
pass3 · attribution · high confidence
#25 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:102
In the Terraform MCP server, tools that can apply or destroy (running apply, discard, or cancel on a run, and workspace, project, and team delete tools) are…
framing: I didn't read action_run's code to confirm its actions are exactly apply/discard/cancel. I inferred that from the tool name and the claim.; evidence: In HashiCorp's terraform-mcp-server source, `pkg/toolsets/registry.go` sets `RequiresTFOps: true` ("additionally gated behind ENABLE_TF_OPERATIONS=true") on `action_run`, `delete_project`, `delete_team` and `delete_workspace_safely`.…; source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go; repos/hashicorp/terraform-mcp-server/contents/pkg/tools/dynamic_tool.go; README.md env var table
source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go; repos/hashicorp/terraform-mcp-server/contents/pkg/tools/dynamic_tool.go; README.md env var table
framing: I didn't read action_run's code to confirm its actions are exactly apply/discard/cancel. I inferred that from the tool name and the claim.
pass1 · api-surface · high confidence
#27 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:104
The Pulumi local MCP server supports CLI-driven workflows (preview, up, refresh, stack outputs), and the hosted server offers organization-wide tools like…
framing: The claim cites /docs/ai/mcp-server/, but that page wasn't fetched. The evidence comes from other Pulumi pages, which only corroborate the claim. Running…; evidence: (escalated from pass1) Pulumi's own pages back up the split between local and hosted. One says "the CLI-driven tools (pulumi-cli-preview, pulumi-cli-up, pulumi-cli-refresh) are local-only, while organization-wide tools like…; source: https://www.pulumi.com/what-is/mcp-for-infrastructure-as-code/ ; https://www.pulumi.com/blog/remote-mcp-server/
source: https://www.pulumi.com/what-is/mcp-for-infrastructure-as-code/ ; https://www.pulumi.com/blog/remote-mcp-server/
framing: exact-match — The claim cites /docs/ai/mcp-server/, but that page wasn't fetched. The evidence comes from other Pulumi pages, which only corroborate the claim. Running pass1 on pulumi/mcp-server would confirm the stack-output tool and the Neo tool…
pass3 · url · medium confidence
#29 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:106
The Pulumi MCP server lets an agent hand deployment work to Neo with a preview gate in front of it.
evidence: The Remote MCP Server announcement says assistants can "delegate complex automation tasks to Pulumi Neo" with the `neo-bridge` tool, and lists Neo's "Human-in-the-loop - Pauses for approval on critical changes". So the hand-off part is…; source: repo:content/blog/remote-mcp-server/index.md (L15, L95-106, L163); intuition: "Preview gate" suggests a `pulumi preview` step that runs before Neo deploys. The sources only describe approvals and…
source: repo:content/blog/remote-mcp-server/index.md (L15, L95-106, L163)
pass1 · feature · medium confidence
#30 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:110
The Terraform MCP server's registry and documentation toolsets are read-only, and tools that can apply or destroy (apply, discard, cancel on a run, and…
framing: Default is documented as `false` and not literally 'unset', but the effect is the same. The server has no separate 'documentation' toolset: the provider docs…; evidence: In hashicorp/terraform-mcp-server pkg/toolsets/registry.go, `RequiresTFOps bool // additionally gated behind ENABLE_TF_OPERATIONS=true` is set on `action_run`, `delete_workspace_safely`, `delete_project`, `delete_team` (and also…; source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go; gh api repos/hashicorp/terraform-mcp-server/contents/README.md; intuition: 'registry and documentation toolsets' names a toolset that doesn't exist (the toolsets are registry…
source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go; gh api repos/hashicorp/terraform-mcp-server/contents/README.md
framing: entailed-narrower — Default is documented as `false` and not literally 'unset', but the effect is the same. The server has no separate 'documentation' toolset: the provider docs come from the registry toolset. `create_run` is not flagged RequiresTFOps (its…
pass1 · api-surface · high confidence
#31 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:110
With HCP Terraform credentials supplied, the Terraform MCP server still lets an agent create and reconfigure workspaces, projects, and variables without…
framing: Minor imprecision: the server can create projects but has no tool to reconfigure them. Workspaces and variables can be both created and updated.; evidence: In hashicorp/terraform-mcp-server pkg/toolsets/registry.go, the write tools need only a TFE session (`RequiresTFE: true`) and not `RequiresTFOps` ("additionally gated behind ENABLE_TF_OPERATIONS=true"). That covers create_workspace…; source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go
source: gh api repos/hashicorp/terraform-mcp-server/contents/pkg/toolsets/registry.go
framing: Minor imprecision: the server can create projects but has no tool to reconfigure them. Workspaces and variables can be both created and updated.
pass1 · behavior · high confidence
#32 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:110
The Terraform MCP server supports token passthrough for centralized HTTP deployments and has no built-in OAuth documented.
framing: The upstream README describes the HTTP mode as offering "per-user token passthrough via headers", with a "Centralized Deployment Example". That matches the…; evidence: HashiCorp's remote-deploy docs say you "can also omit the token when starting the server and pass a token from your client to the server in an HTTP header". Auth on HashiCorp's pages is only TFE_TOKEN, either set on the server or sent…; source: https://developer.hashicorp.com/terraform/mcp-server/deploy/remote; https://developer.hashicorp.com/terraform/tutorials/cloud/mcp
source: https://developer.hashicorp.com/terraform/mcp-server/deploy/remote; https://developer.hashicorp.com/terraform/tutorials/cloud/mcp
framing: exact-match — The upstream README describes the HTTP mode as offering "per-user token passthrough via headers", with a "Centralized Deployment Example". That matches the claim's wording.
pass3 · feature · medium confidence
#33 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:112
The Terraform MCP server gives MCP-compatible agents real-time access to Terraform Registry documentation, modules, and provider schemas.
framing: The README says "Registry APIs for providers, modules, and policies". The claim says "documentation, modules, and provider schemas". "Provider schemas"…; evidence: (escalated from pass1) HashiCorp's official README describes "Direct integration with public Terraform Registry APIs for providers, modules, and policies." Its tools include search_providers, get_provider_details, search_modules and…; source: https://github.com/hashicorp/terraform-mcp-server
source: https://github.com/hashicorp/terraform-mcp-server
framing: entailed-narrower — The README says "Registry APIs for providers, modules, and policies". The claim says "documentation, modules, and provider schemas". "Provider schemas" roughly covers provider docs and resource/data-source capabilities.
pass3 · feature · medium confidence
#34 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:120
The AWS Knowledge MCP Server uses Streamable HTTP transport and requires no authentication.
framing: The claim leaves out the source's rate-limit caveat, but that doesn't change what the claim says.; evidence: (escalated from pass1) The official AWS Labs server page says the server works with "any MCP client that supports Streamable HTTP transport (HTTP)" and states that "The Knowledge MCP server does not require authentication but is subject…; source: https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server
source: https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server
framing: The claim leaves out the source's rate-limit caveat, but that doesn't change what the claim says.
pass3 · feature · high confidence
#35 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:120
The AWS Knowledge MCP Server became GA, announced October 1, 2025, following a July 2025 preview.
framing: The exact Oct 1 date comes from aws-news.com and a third-party listing. The AWS URL path confirms October 2025.; evidence: (escalated from pass1) AWS What's New (2025/10 path, aws-news.com dates it 2025-10-01): "Today, AWS announces the general availability (GA) of the AWS Knowledge Model Context Protocol (MCP) Server." Preview post: "Posted on: Jul 16, 2025…; source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://aws.amazon.com/about-aws/whats-new/2025/07/aws-knowledge-mcp-server-available-preview
source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://aws.amazon.com/about-aws/whats-new/2025/07/aws-knowledge-mcp-server-available-preview
framing: exact-match — The exact Oct 1 date comes from aws-news.com and a third-party listing. The AWS URL path confirms October 2025.
pass3 · temporal · high confidence
#36 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:122
AWS's own docs flag `aws-api-mcp-server` as entering end of development, with migration directed to the newer AWS MCP Server.
framing: The source is AWS's official awslabs GitHub repo (an issue, the README, and MIGRATION.md), not docs.aws.amazon.com. That still fits "AWS's own docs." End of…; evidence: AWS's official awslabs/mcp repo announces: "The AWS API MCP Server (awslabs.aws-api-mcp-server) is entering end of development." It also recommends "migrating to the AWS MCP Server," and the README says the server "is superseded by the…; source: https://github.com/awslabs/mcp/issues/4115; https://github.com/awslabs/mcp/tree/main/src/aws-api-mcp-server
source: https://github.com/awslabs/mcp/issues/4115; https://github.com/awslabs/mcp/tree/main/src/aws-api-mcp-server
framing: exact-match — The source is AWS's official awslabs GitHub repo (an issue, the README, and MIGRATION.md), not docs.aws.amazon.com. That still fits "AWS's own docs." End of development started July 15, 2026, and the server will be removed July 15, 2027.
pass3 · attribution · high confidence
#37 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:122
The AWS Knowledge MCP Server answers questions against AWS documentation, the What's New feed, Well-Architected guidance, and regional service availability…
framing: The "never touches the user's account" part is an inference. It is reasonable, because the server is a public, unauthenticated knowledge service with…; evidence: (escalated from pass1) AWS's GA announcement says the server provides "documentation, blog posts, What's New announcements, and Well-Architected best practices" and "knowledge about the regional availability of AWS APIs and…; source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server
source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server
framing: The "never touches the user's account" part is an inference. It is reasonable, because the server is a public, unauthenticated knowledge service with read-only doc and region-availability tools.
pass3 · feature · high confidence
#39 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:130
Because the Azure MCP server's capability surface tracks whatever RBAC role you grant it, the practical read/write boundary is a configuration decision, not…
framing: Microsoft's docs say RBAC controls access and that read-only is an optional flag. The claim's 'configuration decision, not fixed property' follows from that.…; evidence: Microsoft's Azure MCP Server docs say the server "uses your Azure user credentials or managed identity" and that access "is secured through Azure Role-Based Access Control (RBAC)". Read-only is an optional start parameter ("If true, no…; source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools; intuition: The claim leaves out that the server has its own --read-only flag, which the server enforces. That flag is still…
source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools
framing: entailed-narrower — Microsoft's docs say RBAC controls access and that read-only is an optional flag. The claim's 'configuration decision, not fixed property' follows from that. The 'criteria above' hint points to the blog's own section, not to an outside…
pass3 · attribution · medium confidence
#40 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:138
`containers/kubernetes-mcp-server` offers a read-only mode, explicitly recommended in the project's setup guide via a dedicated read-only ServiceAccount, and…
framing: I didn't open docs/getting-started-kubernetes.md itself. The claim that the guide recommends a read-only ServiceAccount rests on how the README describes…; evidence: The upstream configuration reference lists `read_only` as a boolean with "Default `false`... When `true`, only exposes tools annotated with `readOnlyHint=true`. Prevents any write operations on the cluster." So the server is read/write…; source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration.md (L431-433); gh api repos/containers/kubernetes-mcp-server/readme
source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration.md (L431-433); gh api repos/containers/kubernetes-mcp-server/readme
framing: exact-match — I didn't open docs/getting-started-kubernetes.md itself. The claim that the guide recommends a read-only ServiceAccount rests on how the README describes that guide.
pass1 · behavior · high confidence
#41 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:138
`containers/kubernetes-mcp-server` is released as versioned PyPI and container image releases.
framing: The claim names PyPI and container images. Upstream also ships npm and native binaries, so the claim is an incomplete but accurate subset.; evidence: The upstream README has a PyPI version badge linking to pypi.org/project/kubernetes-mcp-server and says it is "Available as a native binary for Linux, macOS, and Windows, as well as an npm package, a Python package, and container/Docker…; source: gh api repos/containers/kubernetes-mcp-server/readme; gh release view -R containers/kubernetes-mcp-server
source: gh api repos/containers/kubernetes-mcp-server/readme; gh release view -R containers/kubernetes-mcp-server
framing: entailed-narrower — The claim names PyPI and container images. Upstream also ships npm and native binaries, so the claim is an incomplete but accurate subset.
pass1 · feature · high confidence
#42 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:140
`containers/kubernetes-mcp-server` exposes generic Kubernetes and OpenShift resource operations plus Helm chart install and list actions.
framing: The claim's "list actions" fits the README's "List Helm releases". The claim leaves out the uninstall action, Tekton, and other features, but leaving those…; evidence: The repo README says: "Generic Kubernetes Resources: Perform operations on **any** Kubernetes or OpenShift resource." It also says Helm can "**Install** a Helm chart in the current or provided namespace" and "**List** Helm releases".…; source: gh api repos/containers/kubernetes-mcp-server/readme
source: gh api repos/containers/kubernetes-mcp-server/readme
framing: exact-match — The claim's "list actions" fits the README's "List Helm releases". The claim leaves out the uninstall action, Tekton, and other features, but leaving those out doesn't make it wrong.
pass1 · feature · high confidence
#43 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:146
The Flux Operator MCP Server is maintained by ControlPlane via the Flux Operator product, built on the CNCF Flux project.
framing: Naming: the official docs call it the "Flux MCP Server", and its binary/Helm chart is "flux-operator-mcp". The fluxcd.io blog title uses "Flux Operator MCP…; evidence: The MCP server ships in the controlplaneio-fluxcd/flux-operator repo under cmd/mcp. The project README describes Flux Operator as a controller that "manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution", and…; source: https://github.com/controlplaneio-fluxcd/flux-operator/tree/main/cmd/mcp; https://glama.ai/mcp/servers/controlplaneio-fluxcd/flux-operator
source: https://github.com/controlplaneio-fluxcd/flux-operator/tree/main/cmd/mcp; https://glama.ai/mcp/servers/controlplaneio-fluxcd/flux-operator
framing: Naming: the official docs call it the "Flux MCP Server", and its binary/Helm chart is "flux-operator-mcp". The fluxcd.io blog title uses "Flux Operator MCP Server", so the claim's wording is acceptable.
pass3 · entity-spec · high confidence
#44 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:148
The Flux Operator MCP server understands Flux's reconciliation model (sources, kustomizations, Helm releases).
framing: "Understands the reconciliation model" is the blog's own way of describing it. The sources show the server working with Kustomizations, HelmReleases and Flux…; evidence: (escalated from pass1) The Flux blog says assistants using the Flux MCP Server "can trace issues from high-level GitOps resources like ResourceSets, HelmReleases, and Kustomizations" down to pods. It also shows the server copying a Helm…; source: https://fluxcd.io/blog/2025/05/ai-assisted-gitops/
source: https://fluxcd.io/blog/2025/05/ai-assisted-gitops/
framing: "Understands the reconciliation model" is the blog's own way of describing it. The sources show the server working with Kustomizations, HelmReleases and Flux sources, which supports that description.
pass3 · feature · medium confidence
#45 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:156
The GitHub MCP Server offers a local stdio server and a remote hosted server, with the remote server generally available since September 2025.
framing: The changelog's September 4, 2025 GA date matches the claim's "generally available since September 2025". The repo docs (docs/remote-server.md) confirm there…; evidence: (escalated from pass1) GitHub's changelog entry dated September 4, 2025 reads: "The remote GitHub MCP Server is now generally available." GitHub's repo docs describe both the hosted remote server and a local MCP server.; source: https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/
source: https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/
framing: exact-match — The changelog's September 4, 2025 GA date matches the claim's "generally available since September 2025". The repo docs (docs/remote-server.md) confirm there is both a remote and a local server.
pass3 · temporal · high confidence
#46 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:158
The GitHub MCP Server exposes dozens of tools covering repositories, issues, pull requests, Actions runs, and code search, including the ability to open and…
framing: Docker lists 40 tools and other catalogs count around 80, so "dozens" fits either count.; evidence: The official github/github-mcp-server README lists toolsets including repos, issues, pull_requests, and actions ("GitHub Actions workflows and CI/CD operations"), and it documents a merge_pull_request tool. Docker's MCP catalog lists…; source: https://github.com/github/github-mcp-server; https://hub.docker.com/mcp/server/github-official
source: https://github.com/github/github-mcp-server; https://hub.docker.com/mcp/server/github-official
framing: exact-match — Docker lists 40 tools and other catalogs count around 80, so "dozens" fits either count.
pass3 · feature · high confidence
#47 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:164
The Docker MCP Gateway runs as a Docker Desktop / CLI plugin that proxies and aggregates other MCP servers behind one endpoint, with per-server secrets…
evidence: (escalated from pass1) Docker's official repo says the Toolkit is "powered by a docker CLI plugin: docker-mcp" that "can work in Docker Desktop or independently", and that "AI models access MCP servers through a single Gateway". Docker's…; source: https://github.com/docker/mcp-gateway ; https://www.docker.com/blog/docker-mcp-gateway-secure-infrastructure-for-agentic-ai/ ; https://www.docker.com/blog/mcp-toolkit-gateway-explained/
source: https://github.com/docker/mcp-gateway ; https://www.docker.com/blog/docker-mcp-gateway-secure-infrastructure-for-agentic-ai/ ; https://www.docker.com/blog/mcp-toolkit-gateway-explained/
pass3 · feature · high confidence
#48 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:166
The Docker MCP Gateway is distribution and aggregation infrastructure for running third-party MCP servers as containers, handling secrets isolation and routing.
framing: The claim's description (containerized servers, aggregation behind one gateway, secrets handling, routing) matches the official README. "Third-party" and…; evidence: (escalated from pass1) Docker's official repo describes the gateway pattern "AI Client → MCP Gateway → MCP Servers (Docker Containers)", where the gateway handles "protocol translation and routing". It also says it will "Keep secrets out…; source: https://github.com/docker/mcp-gateway
source: https://github.com/docker/mcp-gateway
framing: The claim's description (containerized servers, aggregation behind one gateway, secrets handling, routing) matches the official README. "Third-party" and "distribution" refer to the catalog/registry of servers and are a reasonable reading.
pass3 · feature · high confidence
#49 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:174
The Grafana MCP Server runs as a local process with versioned releases, uses a Grafana API key or service account token, and is primarily a query interface…
framing: The API key option still works but is deprecated in favor of service account tokens. The docs also list username/password auth.; evidence: (escalated from pass1) The official mcp-grafana server runs locally (uvx/docker, stdio) and has versioned releases (the Go package docs show features "added in v1.6.0"). It "reads GRAFANA_URL and GRAFANA_SERVICE_ACCOUNT_TOKEN (or…; source: https://pkg.go.dev/github.com/grafana/mcp-grafana; https://github.com/grafana/mcp-grafana; https://grafana.com/docs/grafana/latest/developer-resources/mcp/
source: https://pkg.go.dev/github.com/grafana/mcp-grafana; https://github.com/grafana/mcp-grafana; https://grafana.com/docs/grafana/latest/developer-resources/mcp/
framing: The API key option still works but is deprecated in favor of service account tokens. The docs also list username/password auth.
pass3 · feature · medium confidence
#50 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:178
A header-controlled SSRF vulnerability, CVE-2026-19516, was disclosed on 2026-08-11 in `mcp-grafana`, letting a caller already permitted to invoke the tool…
framing: The claim's "a caller already permitted to invoke the tool" matches the source's "authenticated caller" and CVSS PR:L. The phrase "proxy reachable from…; evidence: Several CVE databases confirm CVE-2026-19516 was published to CVE/NVD on 11 Aug 2026 and is a header-controlled (X-Grafana-URL) SSRF in mcp-grafana. SentinelOne says "an authenticated caller can redirect requests toward internal…; source: https://www.sentinelone.com/vulnerability-database/cve-2026-19516/ ; https://vulners.com/rapid7/RAPID7:CVE-2026-19516
source: https://www.sentinelone.com/vulnerability-database/cve-2026-19516/ ; https://vulners.com/rapid7/RAPID7:CVE-2026-19516
framing: exact-match — The claim's "a caller already permitted to invoke the tool" matches the source's "authenticated caller" and CVSS PR:L. The phrase "proxy reachable from outside" is a loose paraphrase of the network-reachable (AV:N) pivot into internal…
pass3 · attribution · high confidence
#51 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:184
The Datadog MCP Server is query-focused (metrics, logs, monitors), and Datadog documents it as agent-ready observability access.
framing: Datadog never uses the phrase "agent-ready." It says the server lets AI agents access live observability data, and the claim paraphrases that fairly. Newer…; evidence: Datadog's blog lists the tools as retrieval/query tools (get_logs, get_metrics: "queries timeseries metrics data", get_monitors). Its product page describes the server as a way of "accessing live observability data within AI-driven…; source: https://www.datadoghq.com/blog/datadog-remote-mcp-server/ ; https://www.datadoghq.com/product/ai/mcp-server/
source: https://www.datadoghq.com/blog/datadog-remote-mcp-server/ ; https://www.datadoghq.com/product/ai/mcp-server/
framing: entailed-narrower — Datadog never uses the phrase "agent-ready." It says the server lets AI agents access live observability data, and the claim paraphrases that fairly. Newer toolsets add some write tools (e.g. creating forms), but the server is still…
pass3 · attribution · medium confidence
#52 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:184
The Datadog MCP Server offers both a local/CLI mode and a hosted remote server, uses Datadog API and application keys, and is query-focused (metrics, logs…
framing: The claim leaves out that OAuth is the primary/recommended auth method; API and app keys are an alternative path. The local CLI is described as a fallback to…; evidence: (escalated from pass1) Datadog's official docs say the main MCP Server "provides remote access to most Datadog products (APM, logs, metrics, monitors, dashboards...)" and lets users "query and retrieve observability insights". Datadog…; source: https://docs.datadoghq.com/bits_ai/mcp_server/ ; https://docs.datadoghq.com/llm_observability/mcp_server/ ; https://www.scalekit.com/blog/datadog-mcp-vs-api
source: https://docs.datadoghq.com/bits_ai/mcp_server/ ; https://docs.datadoghq.com/llm_observability/mcp_server/ ; https://www.scalekit.com/blog/datadog-mcp-vs-api
framing: The claim leaves out that OAuth is the primary/recommended auth method; API and app keys are an alternative path. The local CLI is described as a fallback to the remote server, and an mcp_write permission exists, so the server isn't…
pass3 · feature · medium confidence
#53 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:190
The PagerDuty MCP Server's primary surface is incident and on-call query tools, with write scopes such as acknowledging or resolving incidents available.
framing: The source's read-only default plus the opt-in write tools (acknowledge/resolve through manage_incidents) matches what the claim says.; evidence: The cited repo's README says "By default only read-only tools are exposed. Add `--enable-write-tools` to allow tools that modify your PagerDuty account." Its docs/tools/incidents.md lists `manage_incidents` *(write)* with "`status` — new…; source: gh api repos/pagerduty/pagerduty-mcp-server/readme; gh api repos/pagerduty/pagerduty-mcp-server/contents/docs/tools/incidents.md; intuition: Same line, separate problem: the README says "This repository is deprecated and now read-only. Development has moved…
source: gh api repos/pagerduty/pagerduty-mcp-server/readme; gh api repos/pagerduty/pagerduty-mcp-server/contents/docs/tools/incidents.md
framing: exact-match — The source's read-only default plus the opt-in write tools (acknowledge/resolve through manage_incidents) matches what the claim says.
pass1 · feature · high confidence
#54 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:198
The HashiCorp Vault MCP server supports stdio and Streamable HTTP, uses Vault's own auth methods with no separate OAuth layer, and its documented tool set…
framing: "Vault's own auth methods" is a bit loose: the README only documents Vault tokens (env var or header), not other Vault auth methods. It still supports the…; evidence: The official README backs all three parts of the claim. Transport: "This server uses both stdio and StreamableHTTP transports". Auth: it uses `VAULT_TOKEN` or the `X-Vault-Token` header, and the README mentions no OAuth. Tools: it lists…; source: gh api repos/hashicorp/vault-mcp-server/readme
source: gh api repos/hashicorp/vault-mcp-server/readme
framing: "Vault's own auth methods" is a bit loose: the README only documents Vault tokens (env var or header), not other Vault auth methods. It still supports the "no separate OAuth layer" point.
pass1 · feature · high confidence
#55 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:198
HashiCorp explicitly labels the Vault MCP Server as beta; HashiCorp's docs say beta functionality is "stable but possibly incomplete" and discourage…
framing: The page labels the server as beta, the quoted phrase matches word for word, and "strongly discourage" in production supports the claim's "discourage…; evidence: (escalated from pass1) HashiCorp's Vault MCP Server overview page has a "Beta feature" banner that says: "Beta functionality is stable but possibly incomplete and subject to change. We strongly discourage using beta features in…; source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
source: https://developer.hashicorp.com/vault/docs/ai/mcp-server/overview
framing: exact-match — The page labels the server as beta, the quoted phrase matches word for word, and "strongly discourage" in production supports the claim's "discourage production use".
pass3 · quote · high confidence
#56 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:200
HashiCorp's Vault Enterprise has an 'agentic identity' push including trusted identities for agents, delegated authorization, and fine-grained access through…
framing: The claim names HashiCorp/Vault as its source. HashiCorp's own announcement lists trusted identities, delegated authorization, and fine-grained controls, and…; evidence: (escalated from pass1) HashiCorp announced Vault "now enables enterprises to manage agentic IAM including trusted identities, delegated authorization, fine-grained controls and end-to-end tracing." The developer docs call the Agent…; source: https://www.hashicorp.com/en/blog/announcing-native-ai-agent-support-in-hashicorp-vault; https://developer.hashicorp.com/vault/ai/iam/concepts/agent-registry
source: https://www.hashicorp.com/en/blog/announcing-native-ai-agent-support-in-hashicorp-vault; https://developer.hashicorp.com/vault/ai/iam/concepts/agent-registry
framing: exact-match — The claim names HashiCorp/Vault as its source. HashiCorp's own announcement lists trusted identities, delegated authorization, and fine-grained controls, and the docs place the Agent Registry in Vault Enterprise.
pass3 · feature · high confidence
#58 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:211
| AWS Knowledge MCP Server | AWS | Streamable HTTP | Hosted | Yes (always) | No | GA |
framing: The table's column headers aren't shown. I read "Yes (always)" as read-only and "No" as auth/credentials required; both readings fit the sources.; evidence: (escalated from pass1) The AWS GA announcement says: "Today, AWS announces the general availability (GA) of the AWS Knowledge Model Context Protocol (MCP) Server" and "The server is publicly accessible at no cost and does not require an…; source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://github.com/awslabs/mcp/tree/main/src/aws-knowledge-mcp-server
source: https://aws.amazon.com/about-aws/whats-new/2025/10/aws-knowledge-mcp-server-generally-available/ ; https://github.com/awslabs/mcp/tree/main/src/aws-knowledge-mcp-server
framing: The table's column headers aren't shown. I read "Yes (always)" as read-only and "No" as auth/credentials required; both readings fit the sources.
pass3 · capability · medium confidence
#59 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:212
| Azure MCP Server | Microsoft | Local or remote | Both | Depends on RBAC | Yes | Actively maintained |
framing: Remote mode is self-hosted (for example on Azure Container Apps), not a Microsoft-hosted endpoint. "Local or remote" is still accurate.; evidence: (escalated from pass1) Microsoft's Azure MCP Server 2.0 announcement says it "is open-source software" and "can now run as a remote MCP server"; it also runs locally through npx/dnx stdio. The VS Code listing mentions settings for…; source: https://devblogs.microsoft.com/azure-sdk/announcing-azure-mcp-server-2-0-stable-release/ ; https://marketplace.visualstudio.com/items?itemName=ms-azuretools.vscode-azure-mcp-server
source: https://devblogs.microsoft.com/azure-sdk/announcing-azure-mcp-server-2-0-stable-release/ ; https://marketplace.visualstudio.com/items?itemName=ms-azuretools.vscode-azure-mcp-server
framing: Remote mode is self-hosted (for example on Azure Container Apps), not a Microsoft-hosted endpoint. "Local or remote" is still accurate.
pass3 · capability · medium confidence
#60 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:213
`containers/kubernetes-mcp-server` read-only mode is opt-in and it can mutate infra by default.
framing: The source's "`read_only` default `false`" plus the default CRUD tools amounts to the claim's "read-only is opt-in, can mutate infra by default".; evidence: The upstream configuration reference lists `read_only` with default `false`: "When `true`, only exposes tools annotated with `readOnlyHint=true`. Prevents any write operations on the cluster." `disable_destructive` also defaults to…; source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration.md (Access Control table, L431-434); gh api repos/containers/kubernetes-mcp-server/readme
source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration.md (Access Control table, L431-434); gh api repos/containers/kubernetes-mcp-server/readme
framing: exact-match — The source's "`read_only` default `false`" plus the default CRUD tools amounts to the claim's "read-only is opt-in, can mutate infra by default".
pass1 · behavior · high confidence
#61 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:215
The GitHub MCP Server supports stdio or remote transport, is GA for both local and remote, with opt-in read-only mode.
framing: Remote GA and opt-in read-only are confirmed directly. Local GA is inferred from the v1.0.0 stable release, not from a "GA" announcement.; evidence: (escalated from pass1) GitHub Changelog (Sept 4, 2025): "The remote GitHub MCP Server is now generally available." Server config docs list read-only as opt-in on both servers ("Remote Server: X-MCP-Readonly header or /readonly URL. Local…; source: https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/; https://github.com/github/github-mcp-server/blob/main/docs/server-configuration.md; https://newreleases.io/project/github/github/github-mcp-server/release/v1.0.0
source: https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/; https://github.com/github/github-mcp-server/blob/main/docs/server-configuration.md; https://newreleases.io/project/github/github/github-mcp-server/release/v1.0.0
framing: Remote GA and opt-in read-only are confirmed directly. Local GA is inferred from the v1.0.0 stable release, not from a "GA" announcement.
pass3 · feature · medium confidence
#62 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:217
| Grafana MCP Server | Grafana Labs | Local | Self-run | Yes (query-focused) | No | Actively released; patch CVE-2026-19516 before exposing |
framing: The CVE ID, the vendor (Grafana Labs) and the product (Grafana MCP server) all match the advisories. I only checked the CVE anchor, not the table's…; evidence: CVE-2026-19516 is real: a CVSS 9.1 SSRF in Grafana's mcp-grafana server, published August 11, 2026. Pillar Security says it is "a server-side request forgery vulnerability in Grafana MCP, scored 9.1 CVSS." The fix shipped in v1.1.0 on…; source: https://www.pillar.security/blog/valid-but-never-issued-session-spoofing-and-ssrf-in-grafana-mcp; https://labs.cloudsecurityalliance.org/research/csa-research-note-grafana-mcp-ssrf-session-spoofing-20260903/
source: https://www.pillar.security/blog/valid-but-never-issued-session-spoofing-and-ssrf-in-grafana-mcp; https://labs.cloudsecurityalliance.org/research/csa-research-note-grafana-mcp-ssrf-session-spoofing-20260903/
framing: exact-match — The CVE ID, the vendor (Grafana Labs) and the product (Grafana MCP server) all match the advisories. I only checked the CVE anchor, not the table's descriptive cells ("Local", "query-focused").
pass3 · numerical · high confidence
#66 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:226
Terraform's `ENABLE_TF_OPERATIONS` gate is unset by default.
framing: The README gives the default as `false`, and the claim says "unset by default". Both mean the gate is disabled unless you turn it on.; evidence: The hashicorp/terraform-mcp-server README's env var table lists "`ENABLE_TF_OPERATIONS` | Enable tools that require explicit approval | `false`". So the gate is off unless you set it, which matches "unset by default".; source: gh api repos/hashicorp/terraform-mcp-server/readme
source: gh api repos/hashicorp/terraform-mcp-server/readme
framing: entailed-narrower — The README gives the default as `false`, and the claim says "unset by default". Both mean the gate is disabled unless you turn it on.
pass1 · behavior · high confidence
#67 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:227
Several MCP servers are distributed via `npx`- or `uvx`-style runners that fetch the newest version at call time.
framing: This only holds when the version is unpinned. Pinning (`pkg@1.2.3`, `uvx pkg==x`) stops the runner from pulling the latest release, and the claim's "-style…; evidence: (escalated from pass1) Several independent sources describe MCP servers launched with unpinned `npx -y`/`uvx` specs that pull the latest published version at startup. For example, obot.ai mentions "servers distributed as npx or uvx…; source: https://dev.to/0x711/mcp-has-a-supply-chain-problem-1nb8; https://obot.ai/blog/mcp-supply-chain-security/; https://archestra.ai/blog/pin-mcp-server-versions
source: https://dev.to/0x711/mcp-has-a-supply-chain-problem-1nb8; https://obot.ai/blog/mcp-supply-chain-security/; https://archestra.ai/blog/pin-mcp-server-versions
framing: This only holds when the version is unpinned. Pinning (`pkg@1.2.3`, `uvx pkg==x`) stops the runner from pulling the latest release, and the claim's "-style runners that fetch the newest version" wording assumes no pin.
pass3 · behavior · medium confidence
#68 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:231
The linked MCP for Infrastructure as Code page covers MCP's threat model, including tool poisoning, prompt injection, and specific CVEs documented against…
evidence: The target page has the heading "## Is MCP secure enough for production infrastructure?" (L132), which matches the anchor. The section covers "Tool Poisoning Attacks", prompt injection "as an MCP-specific vector", and says "Two CVEs are…; source: repo:content/what-is/mcp-for-infrastructure-as-code.md L132-136
source: repo:content/what-is/mcp-for-infrastructure-as-code.md L132-136
framing: exact-match
pass1 · url · high confidence
#71 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:271
Internal link targets exist: /what-is/mcp-for-infrastructure-as-code/, /docs/ai/mcp-server/, /blog/remote-mcp-server/, /blog/mcp-server-ai-assistants/…
framing: Each URL path matches a Hugo content file at the same location.; evidence: I found a content file for all seven link targets in the repo: content/what-is/mcp-for-infrastructure-as-code.md, content/docs/ai/mcp-server/index.md ("title: MCP server"), content/blog/remote-mcp-server/index.md…; source: repo:content/docs/ai/mcp-server/index.md; repo:content/product/neo.md; repo:content/what-is/mcp-for-infrastructure-as-code.md; repo:content/blog/{remote-mcp-server,mcp-server-ai-assistants,ai-infrastructure-tools}/index.md; repo:content/docs/ai/neo/integrations/mcp/_index.md
source: repo:content/docs/ai/mcp-server/index.md; repo:content/product/neo.md; repo:content/what-is/mcp-for-infrastructure-as-code.md; repo:content/blog/{remote-mcp-server,mcp-server-ai-assistants,ai-infrastructure-tools}/index.md; repo:content/docs/ai/neo/integrations/mcp/_index.md
framing: exact-match — Each URL path matches a Hugo content file at the same location.
pass1 · url · high confidence
#72 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:276
- [Pulumi Neo](/product/neo/)
evidence: The internal link /product/neo/ points to content/product/neo.md, which exists and is titled "Pulumi Neo - Your AI Infrastructure Agent". So the link text "Pulumi Neo" matches the page it targets.; source: repo:content/product/neo.md
source: repo:content/product/neo.md
framing: exact-match
pass1 · url · high confidence
#73 ✅ Verified
content/blog/best-mcp-servers-infrastructure-devops/index.md:277
- [Best AI Infrastructure Tools in 2026](/blog/ai-infrastructure-tools/)
framing: The link text "Best AI Infrastructure Tools in 2026" is the same as the target post's headline.; evidence: The internal link goes to a live Pulumi blog post, and the anchor text matches its H1. The page metadata shows "headline":"Best AI Infrastructure Tools in 2026". PR #22134 adds a title_tag for SEO but says "The H1, URL, and slug are…; source: https://www.pulumi.com/blog/ai-infrastructure-tools/
source: https://www.pulumi.com/blog/ai-infrastructure-tools/
framing: exact-match — The link text "Best AI Infrastructure Tools in 2026" is the same as the target post's headline.
pass3 · url · high confidence
#74 ✅ Verified
content/what-is/mcp-for-infrastructure-as-code.md:186
A page/blog post titled 'Best MCP Servers for Infrastructure and DevOps in 2026' exists at the site path /blog/best-mcp-servers-infrastructure-devops/…
framing: The title and path in the PR description match the claim exactly. The target page ships alongside the link in the same PR.; evidence: The link target is created in this same PR (pulumi/docs#21210), which adds content/blog/best-mcp-servers-infrastructure-devops/index.md. The PR description says it is a new blog post, "Best MCP Servers for Infrastructure and DevOps in…; source: https://github.com/pulumi/docs/pull/21210
source: https://github.com/pulumi/docs/pull/21210
framing: exact-match — The title and path in the PR description match the claim exactly. The target page ships alongside the link in the same PR.
pass3 · url · medium confidence
#26 🤝 Matches
content/blog/best-mcp-servers-infrastructure-devops/index.md:104
The Pulumi MCP server documentation covers client setup for Cursor, Claude Code, Claude Desktop, Windsurf, and Kiro.
evidence: The linked docs page has a setup section for each of the five clients: "### Cursor" (L51), "### Claude Code" (L77), "### Claude Desktop" (L87), "### Windsurf" (L122), "### Kiro" (L140).; source: repo:content/docs/ai/mcp-server/index.md
source: repo:content/docs/ai/mcp-server/index.md
framing: exact-match
pass1 · cross-reference · high confidence
#1 ➖ Not a claim
content/blog/best-mcp-servers-infrastructure-devops/index.md:3
date: 2026-08-28
evidence: This line is the blog post's own front-matter publication date. It is page metadata set by the author, not a factual assertion that can be checked against an outside source.; source: content/blog/best-mcp-servers-infrastructure-devops/index.md:L3 (front matter)
source: content/blog/best-mcp-servers-infrastructure-devops/index.md:L3 (front matter)
pass3 · numerical · high confidence
#22 ➖ Not a claim
content/blog/best-mcp-servers-infrastructure-devops/index.md:85
Most MCP server comparisons stop at "does it exist" and "how many tools does it expose." For infrastructure and DevOps work, where a tool call can change…
evidence: This is the author's editorial opinion introducing their own evaluation criteria. "Most comparisons stop at..." is a loose generalization with no source, number, or named entity to check, so it can't be falsified in any meaningful way.; source: content/blog/best-mcp-servers-infrastructure-devops/index.md L85 (claim text itself; no external source cited); intuition: The "most comparisons" generalization is rhetorical framing. A reviewer could soften it, but it is not an error of fact.
source: content/blog/best-mcp-servers-infrastructure-devops/index.md L85 (claim text itself; no external source cited)
pass3 · entity-spec · medium confidence
#2 🤷 Unverifiable
content/blog/best-mcp-servers-infrastructure-devops/index.md:20
Itemlist URLs for each MCP server (e.g., developer.hashicorp.com/terraform/mcp-server, developer.hashicorp.com/vault/docs/ai/mcp-server/overview…
framing: Target mismatch: the fetched URL is the source_hint (Pulumi page), not any of the ItemList URLs named in the claim.; evidence: The pre-fetched page is the Pulumi MCP Server docs (HTTP 200, title "Pulumi MCP Server | AI-Assisted Infrastructure as Code | Pulumi Docs"). The claim is about nine third-party URLs (HashiCorp, AWS, Azure, Flux, Docker, Grafana, Datadog…; source: https://www.pulumi.com/docs/ai/mcp-server/
source: https://www.pulumi.com/docs/ai/mcp-server/
framing: Target mismatch: the fetched URL is the source_hint (Pulumi page), not any of the ItemList URLs named in the claim.
pass2 · url · low confidence
#20 🤷 Unverifiable
content/blog/best-mcp-servers-infrastructure-devops/index.md:81
The authors queried the official MCP Registry on 2026-08-28 and found 139 actively listed servers whose name or description matched infrastructure and DevOps…
framing: Describes the authors' own methodology. The number depends on their unpublished keyword list and filtering rules.; evidence: The claim reports the authors' own query of the official MCP Registry on 2026-08-28, using their own keyword filter and deduplication rules. The registry's listings as of that date can't be rebuilt now, and no public source publishes…; source: No search run: the claim is a dated snapshot from the authors' own keyword query of registry.modelcontextprotocol.io, and no public archive of that snapshot exists; intuition: A reviewer could ask the author for the exact keyword list and the query script or raw output, so the 139 count can…
source: No search run: the claim is a dated snapshot from the authors' own keyword query of registry.modelcontextprotocol.io, and no public archive of that snapshot exists
framing: Describes the authors' own methodology. The number depends on their unpublished keyword list and filtering rules.
pass3 · numerical · medium confidence
#57 🤷 Unverifiable
content/blog/best-mcp-servers-infrastructure-devops/index.md:208
Pulumi MCP Server comparison row: hosted and self-run, stdio + Streamable HTTP, registry/Cloud tools read-only, CLI tools not read-only, can mutate infra…
evidence: (escalated from pass1) Hosting and transport hold up: there's a local @pulumi/mcp-server and a hosted server at mcp.ai.pulumi.com, with the comparison table listing "Transport | stdio | Streamable HTTP". I couldn't check the read-only…; source: https://www.pulumi.com/what-is/mcp-for-infrastructure-as-code/ ; https://www.pulumi.com/docs/ai/mcp-server/ ; WebSearch ran query "Pulumi MCP server remote hosted streamable HTTP stdio"
source: https://www.pulumi.com/what-is/mcp-for-infrastructure-as-code/ ; https://www.pulumi.com/docs/ai/mcp-server/ ; WebSearch ran query "Pulumi MCP server remote hosted streamable HTTP stdio"
pass3 · feature · medium confidence
#63 ❌ Contradicted
content/blog/best-mcp-servers-infrastructure-devops/index.md:219
| PagerDuty MCP Server | PagerDuty | Local | Self-run | Mostly (check scopes) | Depends on scopes | Actively maintained |
framing: The row also disagrees with the post's own prose at L190, which says the server is "actively maintained" and runs as a "local server". Both should be updated…; evidence: The repo README the blog cites says: "This repository is deprecated and now read-only. Development has moved to PagerDuty's hosted Remote MCP Server". That contradicts "Actively maintained" and also "Local | Self-run", because PagerDuty…; source: gh api repos/pagerduty/pagerduty-mcp-server/readme
source: gh api repos/pagerduty/pagerduty-mcp-server/readme
framing: The row also disagrees with the post's own prose at L190, which says the server is "actively maintained" and runs as a "local server". Both should be updated to point to the hosted Remote MCP Server.
pass1 · capability · high confidence
#64 ❌ Contradicted
content/blog/best-mcp-servers-infrastructure-devops/index.md:224
`containers/kubernetes-mcp-server` and GitHub's MCP server both ship a read-only mode as a launch flag.
framing: Read-only mode still exists in kubernetes-mcp-server, but you now turn it on in a TOML setting (`read_only = true`), not with a launch flag. The flag was…; evidence: GitHub's server does have the flag: its README says "write tools are skipped if `--read-only` is set". kubernetes-mcp-server no longer has one. Its docs/configuration-changes.md lists `--read-only` under "Dropped CLI flags" with the…; source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration-changes.md; gh api repos/github/github-mcp-server/readme; gh release list -R containers/kubernetes-mcp-server; intuition: This was true before kubernetes-mcp-server v0.0.67. Suggested fix: "via a `read_only` config setting".
source: gh api repos/containers/kubernetes-mcp-server/contents/docs/configuration-changes.md; gh api repos/github/github-mcp-server/readme; gh release list -R containers/kubernetes-mcp-server
framing: Read-only mode still exists in kubernetes-mcp-server, but you now turn it on in a TOML setting (`read_only = true`), not with a launch flag. The flag was dropped in the move up from 0.0.66, so v0.0.67 (latest) probably no longer has it.
pass1 · feature · medium confidence
#65 ❌ Contradicted
content/blog/best-mcp-servers-infrastructure-devops/index.md:225
Docker's MCP Gateway can front several MCP servers behind one endpoint for secrets and routing, and can enforce header-based routing and rate limits.
framing: The part about putting several servers behind one endpoint with secrets is accurate. The added "header-based routing and rate limits" capability is not…; evidence: (escalated from pass1) The first half checks out: Docker's README lists features for working with "MCP tools, resources and prompts from multiple servers" and "Secrets Management" through a single gateway. The second half doesn't.…; source: https://github.com/docker/mcp-gateway; https://github.com/docker/mcp-gateway/blob/main/docs/mcp-gateway.md; https://www.getmaxim.ai/articles/top-5-mcp-gateways-for-built-in-routing-and-control/; intuition: Header routing and rate limiting look like features borrowed from other MCP gateways (Kong, agentgateway, Bifrost).
source: https://github.com/docker/mcp-gateway; https://github.com/docker/mcp-gateway/blob/main/docs/mcp-gateway.md; https://www.getmaxim.ai/articles/top-5-mcp-gateways-for-built-in-routing-and-control/
framing: The part about putting several servers behind one endpoint with secrets is accurate. The added "header-based routing and rate limits" capability is not supported; that sounds like a generic API gateway (Kong/agentgateway), not Docker's.
pass3 · feature · medium confidence
#69 ❌ Contradicted
content/blog/best-mcp-servers-infrastructure-devops/index.md:251
There is no single MCP server today that spans infrastructure as code, Kubernetes, and observability.
evidence: (escalated from pass1) Microsoft's Azure MCP Server is one server whose tool list includes IaC (bicepschema, "Azure Terraform | azureterraform"), Kubernetes (aks) and observability ("Azure Monitor | monitor | Query Azure Monitor logs and…; source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/ ; https://hub.docker.com/mcp/server/azure/overview; intuition: A universal negative about a fast-moving ecosystem. Azure MCP Server (and possibly vendor platforms like StackGen)…
source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/ ; https://hub.docker.com/mcp/server/azure/overview
pass3 · feature · low confidence
#14 ⚔️ Mismatch
content/blog/best-mcp-servers-infrastructure-devops/index.md:47
Every cloud vendor and half of DevOps shipped an MCP server in 2026 (this year).
framing: The page disagrees with itself: the social copy dates the launches to 2026, while the body dates several of them to 2025.; evidence: The social copy (L47) says vendors "shipped an MCP server this year" (the post is dated 2026-08-28), but the post's own body contradicts that: AWS Knowledge MCP was "GA, announced October 1, 2025 following a July 2025 preview" (L120)…; source: repo:content/blog/best-mcp-servers-infrastructure-devops/index.md L47 vs L51, L81, L120; intuition: "Every cloud vendor and half of DevOps" is promotional exaggeration, and "this year" is wrong for launches from 2025.…
source: repo:content/blog/best-mcp-servers-infrastructure-devops/index.md L47 vs L51, L81, L120
framing: The page disagrees with itself: the social copy dates the launches to 2026, while the body dates several of them to 2025.
pass1 · temporal · medium confidence
#28 🌀 Framing drift
content/blog/best-mcp-servers-infrastructure-devops/index.md:104
Any MCP-compatible host (Cursor, Claude Code, Claude Desktop, and others) can connect to Pulumi's MCP server alongside other MCP servers in the same session.
framing: overclaim: the claim widens "Any other AI assistant that supports the Model Context Protocol with OAuth" to "Any MCP-compatible host". The "alongside other…; evidence: The MCP server docs page lists Cursor, Claude Code, Windsurf, and Claude Desktop, plus "Any other AI assistant that supports the Model Context Protocol with OAuth". The claim drops the OAuth requirement and says "any MCP-compatible…; source: repo:content/docs/ai/mcp-server/index.md L37-45
source: repo:content/docs/ai/mcp-server/index.md L37-45
framing: overclaim-broader — overclaim: the claim widens "Any other AI assistant that supports the Model Context Protocol with OAuth" to "Any MCP-compatible host". The "alongside other MCP servers in the same session" part isn't in the source.
pass1 · url · medium confidence
#38 🌀 Framing drift
content/blog/best-mcp-servers-infrastructure-devops/index.md:128
The Azure MCP Server uses Azure identity and RBAC for auth, and spans dozens of Azure services (Key Vault, Cosmos DB, Monitor, RBAC) with both read and write…
framing: overclaim: the docs say the server has some write tools (that's what the read-only flag removes). The claim widens this to "both read and write operations…; evidence: (escalated from pass1) Microsoft docs back up the auth part: the server "uses Microsoft Entra ID through the Azure Identity library to authenticate callers", and access is secured through Azure RBAC. They also show namespaces like…; source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/security; https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools; intuition: "read and write per service" seems unlikely, since several Azure MCP namespaces (role, cosmos) look list/query-only.…
source: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/security; https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools
framing: overclaim-broader — overclaim: the docs say the server has some write tools (that's what the read-only flag removes). The claim widens this to "both read and write operations per service".
pass3 · feature · medium confidence
#70 🌀 Framing drift
content/blog/best-mcp-servers-infrastructure-devops/index.md:263
Pulumi Neo is an AI agent that plans and applies infrastructure changes through MCP servers.
framing: overclaim: the source says Neo uses external MCP servers as tools for issue-tracker, observability and runbook context; the claim says Neo 'plans and applies…; evidence: Neo is an AI agent, and it does connect to MCP servers. But the Neo MCP docs describe those servers as sources of context and tools from external services: "MCP integrations connect Neo to external services that expose a Model Context…; source: repo:content/docs/ai/neo/integrations/mcp/_index.md; intuition: L263 lumps Neo in with generic MCP-client agents that apply changes through MCP servers, but Neo makes its changes…
source: repo:content/docs/ai/neo/integrations/mcp/_index.md
framing: overclaim-broader — overclaim: the source says Neo uses external MCP servers as tools for issue-tracker, observability and runbook context; the claim says Neo 'plans and applies infrastructure changes through MCP servers'
pass1 · feature · medium confidence

Findings

IDBucketFile:linesStatusDisposition
F1 🚨 Outstanding content/blog/best-mcp-servers-infrastructure-devops/index.md:47 open —
F2 🚨 Outstanding content/blog/best-mcp-servers-infrastructure-devops/index.md:219 open —
F3 🚨 Outstanding content/blog/best-mcp-servers-infrastructure-devops/index.md:224 open —
F4 🚨 Outstanding content/blog/best-mcp-servers-infrastructure-devops/index.md:225 open —
F5 🚨 Outstanding content/blog/best-mcp-servers-infrastructure-devops/index.md:251 open —
F6 ❓ Author answer content/blog/best-mcp-servers-infrastructure-devops/index.md:20-43 open —
F7 ❓ Author answer content/blog/best-mcp-servers-infrastructure-devops/index.md:81 open —
F8 ❓ Author answer content/blog/best-mcp-servers-infrastructure-devops/index.md:208-209 open —
F9 ⚠️ Reviewer check content/blog/best-mcp-servers-infrastructure-devops/index.md:104 open —
F10 ⚠️ Reviewer check content/blog/best-mcp-servers-infrastructure-devops/index.md:128 open —
F11 ⚠️ Reviewer check content/blog/best-mcp-servers-infrastructure-devops/index.md:263 open —

Editorial stances

Superlative, ranking, or comparative language the diff adds. No verdict — a page's own framing isn't fact-checkable — listed so a reviewer can confirm each is a stance the docs should take.

Investigation log

cross-sibling-reads
not run (not in a templated section)
external-claim-verification
61 of 74 claims verified (3 unverifiable, 5 contradicted, 3 framing-drift) · 4 specialists (numerical, cross-reference, capability, framing); 0 cross-specialist corroborations · routed: 0 inline, 23 Pass 1, 13 Pass 2 (verified 12, contradicted 0, unverifiable 1), 38 Pass 3 (verified 31, contradicted 3, unverifiable 4).
cited-claim-spot-checks
13 of 13 cited claims fetched and compared
frontmatter-sweep
ran on body + meta_desc + social.{bluesky, linkedin, twitter}
temporal-trigger-sweep
ran (recency words present in diff; spot-check in-review)
code-execution
not run (no `static/programs/` change)
code-examples-checks
not run (no fenced code blocks in content files)
editorial-balance-pass
ran (14 H2 sections, 0 flags fired)

Editorial balance

{
  "files": [
    {
      "file": "content/blog/best-mcp-servers-infrastructure-devops/index.md",
      "outliers": [],
      "sections": [
        {
          "heading": "At a glance",
          "lines": 8
        },
        {
          "heading": "What is an MCP server?",
          "lines": 2
        },
        {
          "heading": "Evaluating an MCP server for infrastructure work",
          "lines": 10
        },
        {
          "heading": "Which MCP servers cover infrastructure as code?",
          "lines": 8
        },
        {
          "heading": "Which MCP servers cover cloud provider control planes?",
          "lines": 8
        },
        {
          "heading": "Which MCP servers cover Kubernetes and GitOps?",
          "lines": 8
        },
        {
          "heading": "Which MCP servers cover CI/CD and source control?",
          "lines": 8
        },
        {
          "heading": "Which MCP servers cover observability and incident response?",
          "lines": 11
        },
        {
          "heading": "Which MCP servers cover secrets and security?",
          "lines": 4
        },
        {
          "heading": "Full comparison table",
          "lines": 14
        },
        {
          "heading": "How to run an MCP server safely against production infrastructure",
          "lines": 8
        },
        {
          "heading": "Which MCP server to start with",
          "lines": 4
        },
        {
          "heading": "Frequently asked questions",
          "lines": 12
        },
        {
          "heading": "Learn more",
          "lines": 7
        }
      ],
      "stats": {
        "mean": 8,
        "median": 8.0,
        "std": 3.1
      },
      "threshold_flags": []
    }
  ],
  "trigger": "faq"
}

History

  1. 2026-10-08T22:15:19Z 2bb2017

    initial review (pending publication)