@antv/mcp-server-chart 0.9.10 — Level 1 measurement

Measured 2026-11-02. Asked for @antv/mcp-server-chart@0.9.10. Instrument fingerprint ca9170dfaeae.

Published on npm as @antv/mcp-server-chart. Its own manifest points at https://github.com/antvis/mcp-server-chart, which is what the package says about itself and is not checked here.

This is not a ranking of the most-used servers. This package was measured because it appeared in a candidate list built from registry searches, and the order of those searches is not a measure of use.

Level 1, and not calibration-backed. No tool was called, so this report makes no claim about any tool doing what it says. The calibration that backs the ten curated measurements proves the instrument catches planted claims about what a tool did; Level 1 runs no such checks, and reads the package's own documentation by a stated rule rather than by a person, so nothing in that calibration speaks to this page.

Not named in the README does not mean hidden. A server's tool list can depend on its settings, and READMEs often describe the default setup. This run gave every server the same fake credentials and no settings of its own, so what it shows is that one configuration, not necessarily the one you would run.

In plain words

We installed @antv/mcp-server-chart 0.9.10 from the npm registry, started it in a room with no route to the internet, where every website name answers to this machine and every credential is fake, and asked it to list its tools without calling any of them. Before any tool was used it offered 27 tools, looked up 0 websites, started 2 programs and wrote 0 files; of those, 1 tool and 0 websites are not named in its own README. From starting to answering with that list took about 1.4 s, measured once and while being watched, which makes it slower than it would be otherwise. We called no tool and read the contents of no encrypted connection, so this page says nothing about whether any of its tools does what it says.

The standard this report uses

A website counts as declared only if the README names it.

A sentence about connecting somewhere, without the address, names no website. A tool counts as documented only if its name appears in the README as a whole word. Each question is asked once per thing observed, so what the README documents is never worked out from what the program offered — which is the only way "offered but not documented" can be found at all.

The host rule is loose in one direction, and it is better to say so: it reads any dotted name whose last part is two or more letters, so a filename written in prose can read as a website. That can only make the declared list longer and leave something out of the findings below. It cannot put something in.

What it did at startup, before any tool was used

It started and identified itself as mcp-server-chart 0.8.x.

Time to answer is approximate. It is 1.4 s measured once, from the moment this harness handed the process to an unprivileged user to the timestamp on its reply listing its tools; 1.4 s of that was reaching the end of the opening handshake, and listing the tools took the remaining 6 ms. The process ran under a kernel tracer that stops it at every file it opens, so this is slower than the same start untraced, by an amount not measured and not estimated here. It includes whatever runtime the package brings with it. One run, one version, one machine: there is no second run, so there is no spread to quote and the figure carries no error bar.

setpriv in that list is the harness's own launcher, not the package's doing.

Tools it offers, against its own README

It offered 27 tools. 26 of them are named in README.md.

1 tool it offered is not:

• generate_waterfall_chart
  • offered in tools/list by @antv/mcp-server-chart@0.9.10
  • absent from README.md (286 lines, sha256 759de63bb355…): no whole-word match for "generate_waterfall_chart"

Websites it reached for, against its own README

It reached for no website at startup.

What this report does not say

• It judges no tool. Level 1 calls none, so no claim any tool makes is tested here.
• It is one run, once. A program that behaves one way while being watched and another way otherwise would produce this same page.
• It ran with no route off the machine, so anything that only happens after a connection succeeds did not happen.
• Encrypted traffic was not read. The name it asked for is recorded; the contents are not, and would not be even with a route.
• "Declared" means named in the README, nothing more. Only the README file that shipped in the package was read. A package that documents its tools or its destinations somewhere else — a reference file beside the README, a privacy policy, a wiki, its source — will show every one of them above as not named, which is a fact about this rule and not about the package.
• It is not calibration-backed, for the reason at the top.
• It is not a ranking. No page here says a server is more used, better or worse than another, and the set measured is whatever the candidate searches returned.
• The harness is BRYDGE's own, and BRYDGE has an interest in the question of whether tools do what they say.

Evidence: README.md (286 lines, sha256 759de63bb355), package integrity sha512-km14tIp6xoTw2whXp….

The badge for this measurement

<img class="badge" src="/b/antv--mcp-server-chart.svg" alt="BRYDGE level 1, measured 2026-11-02" width="251" height="20">

It states that a measurement happened and when — not a verdict, not a score, and no colour that means anything. It links to this page, where the limits are. Anyone may use it; nobody needs permission, and nobody can buy a different one.

<div class="snippet"></div>

The badge is regenerated when the package is measured again, so an old badge in a README cannot show a date that has moved on.