AGENTFORCE-MCP-17: MCP Server Served Over HTTP Without Authentication
🟡 Medium · MCP Authentication
Detects MCP servers in TypeScript / JavaScript / Python (MCP SDK, FastMCP) that serve Streamable HTTP or SSE beyond localhost (listen without a host, 0.0.0.0, a host from the environment, or a deployment descriptor) with no authentication on that code path: no bearer / OAuth provider, token verifier, auth middleware or API-key check that applies to the transport in the mode it is served (default or selectable), even when another mode has one.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-17 |
| Severity | Medium |
| Category | MCP Authentication |
| Compliance | OWASP_MCP_TOP_10, SOC2_CC7 |
Remediation
Require authentication on the HTTP transport: the MCP authorization flow (OAuth 2.1 with a token verifier / requireBearerAuth, FastMCP auth=...), or at least a bearer / API-key check in middleware. If the server is meant for local use only, bind it to 127.0.0.1 or use the stdio transport.