SG-017: External MCP Server
Severity: LOW
MCP server URLs pointing outside localhost
Fires when
- An MCP server URL points to a host other than localhost/127.0.0.1
- External MCP servers can receive all tool calls and their responses, expanding the attack surface
Related CVEs
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.