One item I would add next to the tool surface: which version actually runs. Most configs start a server with npx -y <package> and no version, so the code changes whenever the publisher ships, and nothing in the quarterly review would notice. Glow Security also found this week that agents add archived MCP servers from memory. A pinned version in the config plus an npm deprecation check at each review would cover both.