Audit an MCP server specification before integration or release. Finds contract gaps, ambiguous tool definitions, unsafe defaults, transport and authentication risks, weak error handling, and missing tests. Returns prioritized findings plus concrete fixes without inventing evidence.