Visual
Deploy Bukan Selesai
Setelah build hijau, verify runtime actual: exact SHA/version, health, domain, HTTPS, /mcp, discovery URLs, auth challenge, authenticated catalog, toolset hash, logs, dan proxy behavior.
Jangan claim production-ready dari source/build saja.
Live Acceptance Checklist
Live acceptance:
1. unauthenticated request
2. OAuth/auth flow
3. authenticated tools/list
4. real read call
5. real write call (if supported)
6. approval-gated action (if supported)
7. insufficient scope
8. revocation
9. pagination
10. error/refusal behavior
11. file flow (if any)
12. external client rescan
13. fresh conversation/session
14. actual call from target clients
15. verify underlying application/database stateVersion Public Contract
Maintain server version, toolset/catalog version or hash, package/plugin version, dan review descriptor diffs. Setelah contract berubah, MCP client mungkin perlu rescan/reconnect/fresh session.
MCP Registry
Jangan otomatis publish semua artifact ke MCP Registry. Jika project hanya skill/scaffolder/CLI, package distribution sudah cukup.
Jika benar-benar mendistribusikan MCP server: publish artifact ke npm/PyPI/OCI terlebih dahulu, lalu generate/validate server.json, authenticate namespace, publish metadata dengan official mcp-publisher, dan verify registry/package version parity.
Docs dan Handoff
Dokumentasikan endpoint, auth model, scopes, tool groups, permission boundary, install/connect, client refresh, security model, tests, deploy/runbook, versioning, troubleshooting, dan rollback.
Ship dengan Builder Kit
Gunakan MCP Builder Kit sebagai starter/reference production-grade.