Skip to content
Squatch MCP
Sign in

Awardtide Recompete Radar

dev.workers.cybermax-tools.cybermax/awardtide

by dev.workers.cybermax-tools.cybermax· v1.0.2Source: Official MCP Registry
Sign in to watchSign in to claim this server

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: Medium1 finding

Severity: MediumStatus: OpenSQ-TOOL-CROSS-TOOL-REFERENCE

Gives instructions about other tools

Model-facing text gives the AI model instructions about tools that this server does not provide (tool shadowing).

First seen · Last seen

Suggested fix: Describe only this server's own tools.

Severity: Low2 findings

Severity: LowStatus: OpenSQ-ENDPOINT-OUTSIDE-NAMESPACE

Endpoint host outside the namespace domain

The endpoint host is not inside the domain that the registry namespace was verified for.

First seen · Last seen

Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.

Severity: LowStatus: OpenSQ-TOOL-EXFIL-SHAPED-PARAM

Free-text parameter commonly used to collect conversation data

A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.

First seen · Last seen

Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers