com.gcn-alliance/phone-system
Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.
First seen · Last seen
Suggested fix: Limit server instructions to usage guidance for this server's own tools.
The tool's display title describes a lower-impact action than its name (for example a read title on a delete tool).
First seen · Last seen
Suggested fix: Make the title describe the same action as the tool name.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
The tool declares itself read-only, but its name or description indicates it changes, deletes or runs something. Clients that auto-approve read-only tools would run it without confirmation.
First seen · Last seen
Suggested fix: Set readOnlyHint to false and destructiveHint to reflect the tool's behavior.