Severity: MediumStatus: OpenSQ-SERVER-AUTH-NONE-WRITE
State-changing tools available without authentication
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
cloud.doner/hypnotic-patterns
Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.