io.github.cyanheads/switzerland-parliament-mcp-server

by io.github.cyanheads· v0.1.2Official MCP Registry

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: Nov 14, 2026, 04:28 UTC.

Severity: Medium3 findings

MediumOpenSQ-TOOL-CREDENTIAL-ARGUMENT

Asks the AI model to supply credentials as arguments

A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.

First seen Oct 26, 2026 · Last seen Nov 14, 2026

Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.

MediumOpenSQ-TOOL-CREDENTIAL-ARGUMENT

Asks the AI model to supply credentials as arguments

A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.

First seen Oct 26, 2026 · Last seen Nov 14, 2026

Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.

MediumOpenSQ-TOOL-CREDENTIAL-ARGUMENT

Asks the AI model to supply credentials as arguments

A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.

First seen Oct 26, 2026 · Last seen Nov 14, 2026

Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.

Severity: Info1 finding

InfoOpenSQ-TOOL-EXFIL-SHAPED-PARAM

Free-text parameter commonly used to collect conversation data

A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.

First seen Oct 26, 2026 · Last seen Nov 14, 2026

Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.

What this scan does not cover

Squatch never calls a server's tools, so it cannot see what they actually do at run time.
It scans without credentials: tools behind authentication may not be visible.
It does not review source code, dependencies or the publisher's infrastructure.
A server can change behavior between scans; monitoring compares each scan with the last.
Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers

Security scan

No critical findings detected

No open findings at HIGH or above; lower-severity findings: 3 medium, 0 low, 1 info.

1 piece of evidence

Source: Squatch observedscan
Metadata and configuration analysis; tools are not executed.
Observed Nov 14, 2026, 04:28 UTC

Last checked Nov 14, 2026, 04:29 UTC

Authentication

Squatch observed

Summary: { "type": "none", "challengeStatus": null, "scopesSupported": [], "resourceMetadataUrl": null, "authorizationServers": [] }

Protocol conformance

Checks: { "checks": [ { "check": "tools_list_deterministic", "passed": true }, { "check": "list_methods_succeed", "passed": true }, { "check": "list_results_schema_valid", "passed": true }, { "check": "pagination_terminates", "passed": true }, { "check": "tool_names_valid", "passed": true }, { "check": "tool_names_unique", "passed": true }, { "check": "no_network_schema_refs", "passed": true }, { "check": "x_mcp_header_valid", "passed": true }, { "check": "icon_urls_https_or_data", "detail": "no icons declared", "passed": true }, { "check": "discover_present", "passed": true }, { "check": "result_type_present", "passed": true }, { "check": "cacheable_fields_present", "passed": true }, { "check": "server_info_in_meta", "passed": true }, { "check": "no_session_id", "passed": true }, { "check": "unknown_method_404", "passed": true }, { "check": "notification_202", "passed": true }, { "check": "get_405", "passed": true } ], "toolsListNondeterministic": false }

Full technical details