rt_check_cross_origin
Scans tool descriptions for references to tools from other servers, detecting cross-origin instructions that enable tool shadowing attacks.
Instructions
Scan tool descriptions for references to tools from OTHER servers — patterns like 'when using the email tool', 'before calling read_file'. These cross-origin instructions enable tool shadowing attacks.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes | Server command to execute (e.g. 'node', 'bun', 'npx') | |
| args | No | Command arguments (e.g. ['run', 'server.js']) | |
| env | No | Additional environment variables | |
| timeout_ms | No | Connection timeout in milliseconds (default: 30000) |