tools / mcp audit / rules / mcp servers or tools approved without a prompt · v0.1.0 · View source · Edit on GitHub
MCP audit rule · v0.1.0
MCP servers or tools approved without a prompt
Approving every project MCP server, or every tool of a server, means a cloned repository or an injected prompt can start servers and call tools without you seeing a prompt. A "*" in alwaysAllow or autoApprove is treated here as an approve-everything entry (not documented as a wildcard).
- client settings checks
- 5 test fixtures
high auto-approve-all
Flagged
2 > "enableAllProjectMcpServers": trueFix
Remove "enableAllProjectMcpServers" and list only the servers you reviewed in "enabledMcpjsonServers". Replace a "*" in "alwaysAllow" or "autoApprove" with the names of the safe, read-only tools.
Fine
{
"enableAllProjectMcpServers": false,
"enabledMcpjsonServers": [
"memory"
]
}