cfg_check_transport_security
Scans MCP configuration files for transport security risks including unencrypted HTTP, missing TLS on SSE/WebSocket, binding to all interfaces, and missing Authorization headers.
Instructions
Verify transport security: HTTP vs HTTPS, SSE without TLS, WebSocket without WSS, servers bound to 0.0.0.0, tunnel URLs (ngrok, localtunnel), missing Authorization headers.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Path to MCP configuration file |