A
100/100 First Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
1
Score
100/100
LOW 1
Findings (1)
LOW
Non-localhost remote MCP server URL
L114 Detects MCP server configurations connecting to non-localhost remote URLs
"url": "https://pubmed.ncbi.nlm.nih.gov/..." FIX
Change the MCP server URL to localhost or a trusted internal endpoint. If a remote server is required, verify the domain ownership and use HTTPS with certificate validation.
FP?
Likely FP if the URL points to example.com, a documentation domain, or a well-known SaaS API endpoint (e.g., api.openai.com).