Aard

ai.aard/aard

by ai.aard· v0.1.0Official MCP Registry

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: Nov 10, 2026, 06:00 UTC.

Severity: Critical1 finding

CriticalOpenSQ-SERVER-INSTRUCTIONS-INJECTION

Server instructions contain directives to the AI model

The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.

First seen Oct 14, 2026 · Last seen Nov 10, 2026

Suggested fix: Limit server instructions to usage guidance for this server's own tools.

Severity: Low3 findings

LowOpenSQ-TOOL-LENGTH-ANOMALY

Unusually long model-facing text

Model-facing text is unusually long, which consumes context and leaves room to hide content.

First seen Oct 14, 2026 · Last seen Nov 10, 2026

Suggested fix: Shorten descriptions; move long documentation out of model-facing fields.

LowOpenSQ-REPO-MISSING

No source repository linked

No source repository is linked in the registry entry.

First seen Oct 14, 2026 · Last seen Nov 10, 2026

Suggested fix: Add a repository to server.json.

LowOpenSQ-CONFORMANCE-MODERN-FAILURE

Protocol conformance checks failed

The server failed one or more MCP protocol conformance checks.

First seen Oct 14, 2026 · Last seen Nov 10, 2026

Suggested fix: Review the failed checks against the MCP specification.

What this scan does not cover

Squatch never calls a server's tools, so it cannot see what they actually do at run time.
It scans without credentials: tools behind authentication may not be visible.
It does not review source code, dependencies or the publisher's infrastructure.
A server can change behavior between scans; monitoring compares each scan with the last.
Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers

Security scan

High-severity findings detected

1 open finding at HIGH or above (1 critical).

1 piece of evidence

Source: Squatch observedscan
Metadata and configuration analysis; tools are not executed.
Observed Nov 10, 2026, 06:00 UTC

Last checked Nov 10, 2026, 06:00 UTC

Authentication

Squatch observed

Summary: { "type": "none", "challengeStatus": null, "scopesSupported": [], "resourceMetadataUrl": null, "authorizationServers": [] }

Protocol conformance

Checks: { "checks": [ { "check": "list_methods_succeed", "detail": "tools/list returned JSON-RPC error -32010 \"Authentication required. Connect with OAuth \\u2014 the WWW-Authenticate header's resource_metadata names the authorization se...\"; resources/list returned JSON-RPC error -32010 \"Authentication required. Connect with OAuth \\u2014 the WWW-Authenticate header's resource_metadata names the authorization se...\"; resources/templates/list returned JSON-RPC error -32010 \"Authentication required. Connect with OAuth \\u2014 the WWW-Authenticate header's resource_metadata names the authorization se...\"; prompts/list returned JSON-RPC error -32010 \"Authentication required. Connect with OAuth \\u2014 the WWW-Authenticate header's resource_metadata names the authorization se...\"", "passed": false }, { "check": "list_results_schema_valid", "passed": true }, { "check": "pagination_terminates", "passed": true }, { "check": "tool_names_valid", "passed": true }, { "check": "tool_names_unique", "passed": true }, { "check": "no_network_schema_refs", "passed": true }, { "check": "x_mcp_header_valid", "passed": true }, { "check": "icon_urls_https_or_data", "detail": "no icons declared", "passed": true }, { "check": "discover_present", "passed": true }, { "check": "result_type_present", "passed": true }, { "check": "cacheable_fields_present", "passed": true }, { "check": "server_info_in_meta", "passed": true }, { "check": "no_session_id", "passed": true }, { "check": "unknown_method_404", "detail": "HTTP 401, JSON-RPC code -32010", "passed": false }, { "check": "notification_202", "detail": "HTTP 401", "passed": false }, { "check": "get_405", "passed": true } ], "toolsListNondeterministic": false }

Full technical details