Skip to main content
Version: next

MCP-021: Wildcard HTTP Interface Binding - MCP

Summary​

  • Rule ID: MCP-021
  • Severity: MEDIUM
  • Category: MCP
  • Normative Level: SHOULD
  • Auto-Fix: No
  • Verified On: 2026-02-13

Applicability​

  • Tool: all
  • Version Range: unspecified
  • Spec Revision: 2025-11-25

Evidence Sources​

Test Coverage Metadata​

  • Unit tests: true
  • Fixture tests: true
  • E2E tests: false

Examples​

The following examples demonstrate what triggers this rule and how to fix it.

Invalid​

{
  "mcpServers": {
    "wild": {
      "type": "http",
      "url": "http://0.0.0.0:3000/mcp"
    }
  }
}

Valid​

{
  "mcpServers": {
    "local": {
      "type": "http",
      "url": "http://localhost:3000/mcp"
    }
  }
}