Skip to content
Squatch MCP
Sign in

io.github.cyanheads/exchange-rates-mcp-server

io.github.cyanheads/exchange-rates-mcp-server

by io.github.cyanheads· v0.6.0Source: Official MCP Registry
Sign in to watchSign in to claim this server

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: High3 findings

Severity: HighStatus: OpenSQ-SERVER-AUTH-NONE-WRITE

State-changing tools available without authentication

The remote server lists state-changing tools without requiring authentication.

First seen · Last seen

Suggested fix: Require MCP authorization for servers that expose state-changing tools.

Severity: HighStatus: OpenSQ-TOOL-ANNOTATION-UNDERCLAIM

Annotations understate what the tool does

The tool declares itself read-only, but its name or description indicates it changes, deletes or runs something. Clients that auto-approve read-only tools would run it without confirmation.

First seen · Last seen

Suggested fix: Set readOnlyHint to false and destructiveHint to reflect the tool's behavior.

Severity: HighStatus: OpenSQ-TOOL-CONCEALMENT

Text asks the AI model to hide actions from the user

Model-facing text instructs the AI model to hide actions or information from the user.

First seen · Last seen

Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.

3 resolved or dismissed findings
Severity: HighStatus: ResolvedSQ-TOOL-CONCEALMENT

Text asks the AI model to hide actions from the user

Model-facing text instructs the AI model to hide actions or information from the user.

First seen · Last seen

Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.

Status history
  1. ResolvedSquatch
Severity: HighStatus: ResolvedSQ-TOOL-CONCEALMENT

Text asks the AI model to hide actions from the user

Model-facing text instructs the AI model to hide actions or information from the user.

First seen · Last seen

Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.

Status history
  1. ResolvedSquatch
Severity: MediumStatus: ResolvedSQ-TOOL-INJECTION-INSTRUCTIONS

Instructions addressed to the AI model

Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).

First seen · Last seen

Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.

Status history
  1. ResolvedSquatch

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers