Context Awesome MCP
https://www.context-awesome.com/api/mcp
Severity breakdown
Worst finding
Tool `find_awesome_section` accepts unconstrained string input
· find_awesome_section
The following string parameter(s) have no `maxLength` constraint: `query`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.
fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.
All 2 findings
- mediumTool `find_awesome_section` accepts unconstrained string input· find_awesome_sectionunconstrained input
The following string parameter(s) have no `maxLength` constraint: `query`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.
fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.
- mediumTool `get_awesome_items` accepts unconstrained string input· get_awesome_itemsunconstrained input
The following string parameter(s) have no `maxLength` constraint: `githubRepo`, `listId`, `section`, `subcategory`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.
fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.
Reproduce this
Every finding above comes from a public, deterministic rule engine — no LLM in the decision path, same input always the same output. You can run it against this server yourself and get byte-identical results:
curl -fsSL capframe.ai/install | sh capframe find ./your-mcp-config.json --out findings.json
Five-step quickstart if you want the whole Find → Bind → Guard loop. If you'd rather have someone read your real tool definitions rather than the advertised surface — including the ones this public scan can't reach — that's the Agent Security Audit.
How this was scored
Source http — live HTTP MCP endpoint, classified against every rule. Findings are emitted by the public capframe.findings.v1 schema. Score = 100 − (10·Critical + 4·High + 2·Medium + 1·Low), clamped to [0, 100].
Disagree with a finding? Open an issue.