Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
The tool's display title describes a lower-impact action than its name (for example a read title on a delete tool).
First seen · Last seen
Suggested fix: Make the title describe the same action as the tool name.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
The tool declares itself read-only, but its name or description indicates it changes, deletes or runs something. Clients that auto-approve read-only tools would run it without confirmation.
First seen · Last seen
Suggested fix: Set readOnlyHint to false and destructiveHint to reflect the tool's behavior.
The tool runs code, commands or queries supplied at call time and does not declare a closed-world scope.
First seen · Last seen
Suggested fix: Narrow the tool to specific operations, or declare and enforce a closed-world sandbox.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.
First seen · Last seen
Suggested fix: Limit server instructions to usage guidance for this server's own tools.
The tool declares itself read-only, but its name or description indicates it changes, deletes or runs something. Clients that auto-approve read-only tools would run it without confirmation.
First seen · Last seen
Suggested fix: Set readOnlyHint to false and destructiveHint to reflect the tool's behavior.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.