Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.
First seen · Last seen
Suggested fix: Limit server instructions to usage guidance for this server's own tools.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.
The endpoint host is not inside the domain that the registry namespace was verified for.
First seen · Last seen
Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.