Fix: resources/list returns at least one resource when advertised

Web-audit fix skill for the mcp-resources-list check (MCP, SHOULD).

Goal

Honor capabilities.resources with a non-empty resources/list result.

Fix

If initialize advertises capabilities.resources, implement resources/list and return a result.resources array with at least one entry (uri plus a name or description). An empty list or a transport failure means the capability was advertised but is not actually there. Omit capabilities.resources entirely if the server has no resources.

Resources

• MCP resources

Copy-paste prompt

Paste this into your coding agent. Your audit adds what it observed for this check:

Verify

Re-run the audit at https://anc.dev/audit or call the audit_website MCP tool; the mcp-resources-list check should report pass.