Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.
The server failed one or more MCP protocol conformance checks.
First seen · Last seen
Suggested fix: Review the failed checks against the MCP specification.
No source repository is linked in the registry entry.
First seen · Last seen
Suggested fix: Add a repository to server.json.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.