---
title: "MCP Transport & DNS-Rebinding Security Auditor"
method: POST
path: "/v1/tools/audit_mcp_transport"
tags: ["MCP", "transport", "DNS rebinding", "Origin", "Streamable HTTP", "security"]
---

# MCP Transport & DNS-Rebinding Security Auditor

`POST /v1/tools/audit_mcp_transport`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/audit_mcp_transport`
- Auth: none declared

Audits an MCP server's transport security posture — Origin/Host validation, loopback binding, DNS-rebinding protection, and token passthrough — against the spec requirements and the rmcp / mcp-toolbox CVE classes. Reference rules are static and may age — verify against the live MCP spec.

**Tool URL:** https://ainumbers.co/tools/284-mcp-transport-dns-rebinding-auditor.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `bind_address` string
  - `allowed_origins` string
  - `answers` object

## Response `200`

Successful tool execution result

- object
  - `score` number
  - `findings` unknown[]
    - unknown

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)