MCP
transport
DNS rebinding
Origin
Streamable HTTP
security

MCP Transport & DNS-Rebinding Security Auditor

Audits an MCP server's transport security posture — Origin/Host validation, loopback binding, DNS-rebinding protection, and token passthrough — against the spec requirements and the rmcp / mcp-toolbox CVE classes. Reference rules are static and may age — verify against the live MCP spec.

Tool URL: https://ainumbers.co/tools/284-mcp-transport-dns-rebinding-auditor.html AP2/Policy Mandate export: yes

post/v1/tools/audit_mcp_transport

Request

  • Base URL: https://ainumbers.co
  • URL: https://ainumbers.co/v1/tools/audit_mcp_transport
  • Auth: none declared

Request body

bind_addressstring
allowed_originsstring
answersobject

Response

Successful tool execution result

scorenumber

Changes

No recorded changes to this operation across all 1 revision of this API.