tools / mcp audit / rules / server with neither command nor url · v0.1.0 · View source · Edit on GitHub
MCP audit rule · v0.1.0

Server with neither command nor url

The client cannot start this server, and the auditor cannot check what it would run.

  • each server checks
  • 3 test fixtures

low unknown-transport

Flagged

  3 >     "s": {
  4         "args": [
  5           "x"

Fix

Add a "command" (local server) or a "url" (remote server).

Fine

{
  "mcpServers": {
    "s": {
      "command": "node",
      "args": [
        "server.js"
      ]
    }
  }
}

References

← All rules

Running agents in production?Qlucent assesses agent permissions and data boundaries. →