Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
The tool's display title describes a lower-impact action than its name (for example a read title on a delete tool).
First seen · Last seen
Suggested fix: Make the title describe the same action as the tool name.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
A name or word mixes Latin letters with look-alike letters from other scripts.
First seen · Last seen
Suggested fix: Use a single script per identifier; tool and parameter names should be ASCII.
A name or word mixes Latin letters with look-alike letters from other scripts.
First seen · Last seen
Suggested fix: Use a single script per identifier; tool and parameter names should be ASCII.
A name or word mixes Latin letters with look-alike letters from other scripts.
First seen · Last seen
Suggested fix: Use a single script per identifier; tool and parameter names should be ASCII.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The server failed one or more MCP protocol conformance checks.
First seen · Last seen
Suggested fix: Review the failed checks against the MCP specification.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
A tool that appears to delete data, change permissions or run code declares no tool annotations.
First seen · Last seen
Suggested fix: Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint so clients can request confirmation.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.