AGENTFORCE-AF-17: Write Tool on Unauthenticated Mule MCP Server
🔴 High · MuleSoft Agent Fabric
Reports each MCP tool that writes to a backend system, at its <mcp:tool-listener>, when the Mule MCP server has no authentication in the repository (no autodiscovery, no security filter) and listens beyond loopback.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-AF-17 |
| Severity | High |
| Category | MuleSoft Agent Fabric |
Remediation
Authenticate the MCP endpoint (API Manager / Flex Gateway policy with autodiscovery, or a security filter on the listener) and require a confirmation or a narrower scope for write tools.