AGENTFORCE-MCP-07: MCP Server Network Exposure

🔴 High · Headless MCP Access

Detects MCP servers configured with non-localhost bind addresses (0.0.0.0 or external IPs) or remote connections without TLS enforcement. Prevents unauthorized network access to MCP tool endpoints.

Details

Field	Value
Rule ID	AGENTFORCE-MCP-07
Severity	High
Category	Headless MCP Access

Remediation

Refer to the SquireX documentation for remediation guidance specific to AGENTFORCE-MCP-07.

See Also

• Rule catalog index
• SquireX scan documentation