Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.
First seen · Last seen
Suggested fix: Limit server instructions to usage guidance for this server's own tools.
Model-facing text instructs the AI model to hide actions or information from the user.
First seen · Last seen
Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
The tool's display title describes a lower-impact action than its name (for example a read title on a delete tool).
First seen · Last seen
Suggested fix: Make the title describe the same action as the tool name.
The tool's display title describes a lower-impact action than its name (for example a read title on a delete tool).
First seen · Last seen
Suggested fix: Make the title describe the same action as the tool name.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
Model-facing text gives the AI model instructions about tools that this server does not provide (tool shadowing).
First seen · Last seen
Suggested fix: Describe only this server's own tools.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
The server failed one or more MCP protocol conformance checks.
First seen · Last seen
Suggested fix: Review the failed checks against the MCP specification.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.