Family plus stable number. Variants belong in the case record, not in an improvised ID.
Also BLOCKED, UNKNOWN or NOT APPLICABLE. Results always belong to a recorded environment.
Every executed conclusion points to an evidence record. Blocked cases explain why no execution artifact exists.
Rules of use
Specific enough to reproduce.
- Select only the families required by the buyer's decision.
- Write prerequisites, input, expected result, permitted operation, evidence and stop limit before execution.
- Record server, client, protocol, transport, authorization context and versions separately from the ID.
- Use dated specification or client/platform requirements. Do not force a current requirement onto an older scoped version.
- Never convert an unknown or blocked case into a pass, and never turn a protocol pass into a workflow claim.
Catalogue
Eleven test families.
Example labels below are starting points. A paid scope contains the exact expectation and evidence rule for each selected case.
CONConnection
Reachability, initialization, version negotiation and session continuity.
CON-01Endpoint reachableCON-02Initialization completesCON-03Version outcome recordedCON-04Session remains usable
TRNTransport
Behaviour on the transport named in scope; transports are not treated as interchangeable.
TRN-01stdio exchangeTRN-02Streamable HTTP exchangeTRN-03Session identifier handlingTRN-04Reconnect or termination
AUTAuthorization
The named authorization flow and its safe failure paths.
AUT-01Protected-resource discoveryAUT-02Approved sign-in completesAUT-03Invalid or expired credentialAUT-04Least-privilege denial
DSCDiscovery
Advertised server capabilities and changes visible to the named client.
DSC-01Capability discoveryDSC-02Tool listDSC-03Resource listDSC-04Prompt list
TOLTools
Tool metadata, input contracts, valid calls and outputs.
TOL-01Name and descriptionTOL-02Input schemaTOL-03Valid invocationTOL-04Output contract
ERRErrors & recovery
Invalid requests, service errors and recovery without hiding failed attempts.
ERR-01Missing required inputERR-02Invalid valueERR-03Rate or service failureERR-04Recovery and retry
CLINamed client
Observed behaviour in the exact client and version; scripts do not substitute for this family.
CLI-01Configuration acceptedCLI-02Connection in product UICLI-03Tool exposed to modelCLI-04Client-specific failure
WRKWorkflow
A buyer-defined outcome across one or more steps, including safe failure.
WRK-01Outcome definitionWRK-02Multi-step completionWRK-03Permission continuityWRK-04Output verification
ENTEnterprise environment
Only agreed enterprise controls that are available and safe to test.
ENT-01SSO or identity contextENT-02Role or repository boundaryENT-03Proxy or private networkENT-04Audit evidence
PRFPerformance
Repeatable response behaviour under an agreed, limited workload.
PRF-01Baseline latencyPRF-02Timeout boundaryPRF-03Large responsePRF-04Agreed concurrency
SAFSafety boundary
Checks for authorized scope and unintended exposure; not a penetration test or certification.
SAF-01Credential redactionSAF-02Denied-scope requestSAF-03Unexpected data stopSAF-04State-change guard
Reference boundary
Protocol source, not invented authority.
The protocol-aligned families are informed by the official MCP 2026-07-28 pages for versioning, transports, authorization, and server features. Named-client, workflow, enterprise, performance and safety expectations require their own agreed sources. This taxonomy is an internal review system, not part of the MCP specification.