Skip to content
Squatch MCP

SCRIPTMASTERLABS — Provider Trust + CANON

com.scriptmasterlabs/provider-trust

by com.scriptmasterlabs· v1.3.4Source: Official MCP Registry

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: Low2 findings

Severity: LowStatus: OpenSQ-ENDPOINT-OUTSIDE-NAMESPACE

Endpoint host outside the namespace domain

The endpoint host is not inside the domain that the registry namespace was verified for.

First seen · Last seen

Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.

Severity: LowStatus: OpenSQ-CONFORMANCE-MODERN-FAILURE

Protocol conformance checks failed

The server failed one or more MCP protocol conformance checks.

First seen · Last seen

Suggested fix: Review the failed checks against the MCP specification.

1 resolved or dismissed finding
Severity: LowStatus: ResolvedSQ-ENDPOINT-OUTSIDE-NAMESPACE

Endpoint host outside the namespace domain

The endpoint host is not inside the domain that the registry namespace was verified for.

First seen · Last seen

Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.

Status history
  1. ResolvedSquatch

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers