Open rules · v0.1.0
MCP config auditor rules
Every check the MCP and agent config auditor runs, with severity, rationale and fix. Rules are open-source YAML files.
- 20 rules
- 2 critical
- 11 high
- 5 medium
- 2 low
critical
Secret in command arguments
secret-in-argscriticalSecret in env block
secret-in-envhighMCP servers or tools approved without a prompt
auto-approve-allhighClaude Code starts in bypassPermissions mode
bypass-permissionshighUntrusted input can reach an outbound tool
dangerous-mixhighDocker container with host-level access
docker-privilegedhighFilesystem server rooted at a drive, root or home directory
fs-roothighPath to credentials or secrets in arguments
fs-sensitive-pathhighPackage installed from a URL or git repo
package-from-urlhighRemote server over plain HTTP
remote-httphighSecret in headers
secret-in-headershighSecret in URL
secret-in-urlhighServer that runs shell commands
shell-servermediumClaude Code allow rule approves every use of a tool
broad-permissionsmediumDocker image without a pinned tag or digest
docker-unpinnedmediumnpx package on a moving tag or version range
npx-latestmediumnpx package without a version
npx-unpinnedmediumuvx package without a version
uvx-unpinnedlowRemote server with no authentication header
remote-no-authlowServer with neither command nor url
unknown-transport