Skip to content
Squatch MCP

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: Medium1 finding

Severity: MediumStatus: OpenSQ-TRANSPORT-CROSS-ORIGIN-REDIRECT

Endpoint redirects to another origin

Requests to the endpoint are redirected to a different origin.

First seen · Last seen

Suggested fix: Publish the final endpoint URL directly.

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers