SG-109: MCP server credential/relay redirect
Severity: MEDIUM
An mcpServers httpUrl/url to an external relay carrying a credential (MEDIUM), or to a known proxy-reseller/typosquat host (HIGH). Escalates over SG-017's flat LOW for the base-URL-MITM / credential-to-relay shape.
Fires when
- An mcpServers httpUrl/url points to a known proxy-reseller or typosquat relay host (HIGH).
- An mcpServers entry routes to a non-official external host while carrying a provider API key (sk-ant/sk-/ghp_/xoxb-/AKIA) in the server config (MEDIUM) - the base-URL-MITM / credential-to-relay shape.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.