Skip to content
Squatch MCP

Commonkite: Free Image Search API, Creative Commons & CC0

dev.workers.cybermax-tools.cybermax/commonkite

by dev.workers.cybermax-tools.cybermax· v1.0.2Source: Official MCP Registry

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: Low1 finding

Severity: LowStatus: OpenSQ-ENDPOINT-OUTSIDE-NAMESPACE

Endpoint host outside the namespace domain

The endpoint host is not inside the domain that the registry namespace was verified for.

First seen · Last seen

Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers