elicitation_auditor__scan_text
Scan MCP server source code for elicitation anti-patterns, including secret requests, unsafe URLs, credential leaks, identity misuse, and unchecked decline/cancel results.
Instructions
Scan MCP server source for elicitation anti-patterns from the 2026-07-28 spec: form mode requesting secrets or embedding a link, URL mode opened directly on a third-party authorize endpoint, credentials in the elicitation URL, a form answer used as the user's identity, and a result used without checking decline or cancel.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Optional label shown in findings (e.g. filename) | |
| content | Yes | The code content to scan |