> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP server rules

> Vulnerabilities in MCP servers, tools, and their configurations

MCP server rules cover vulnerabilities in MCP servers, tools, and their configurations.

* [Code injection](/flintai/platform/rules/code-injection)
* [Command injection](/flintai/platform/rules/command-injection)
* [Confused deputy attack](/flintai/platform/rules/confused-deputy-attack)
* [Context overexposure/leakage](/flintai/platform/rules/context-overexposure)
* [Context spoofing/integrity violation](/flintai/platform/rules/context-spoofing)
* [Cross-server tool shadowing/interference](/flintai/platform/rules/cross-server-tool-shadowing)
* [Data exfiltration via legitimate tools](/flintai/platform/rules/data-exfiltration)
* [Dynamic behavior change (rug pull)](/flintai/platform/rules/rug-pull)
* [Excessive permissions (least privilege violation)](/flintai/platform/rules/excessive-permissions)
* [Exposed unnecessary ports/interfaces](/flintai/platform/rules/exposed-ports)
* [Hardcoded credentials](/flintai/platform/rules/hardcoded-credentials)
* [Indirect prompt injection](/flintai/platform/rules/indirect-prompt-injection)
* [Insecure direct object references (IDOR)](/flintai/platform/rules/insecure-direct-object-references)
* [Insecure memory/context persistence](/flintai/platform/rules/insecure-memory-context-persistence)
* [Insufficient authorization/access control](/flintai/platform/rules/insufficient-authorization)
* [Lack of observability & auditing](/flintai/platform/rules/lack-of-observability)
* [Lack of transport encryption (TLS)](/flintai/platform/rules/lack-of-tls)
* [Missing/weak authentication](/flintai/platform/rules/missing-weak-authentication)
* [Model/tool identity misbinding](/flintai/platform/rules/model-tool-identity-misbinding)
* [Path traversal](/flintai/platform/rules/path-traversal)
* [Resource exhaustion](/flintai/platform/rules/resource-exhaustion)
* [Sampling vulnerability](/flintai/platform/rules/sampling-vulnerability)
* [Shadow/unmanaged MCP servers](/flintai/platform/rules/shadow-unmanaged-mcp-servers)
* [Silent redefinition](/flintai/platform/rules/silent-redefinition)
* [Supply chain risks/dependency tampering](/flintai/platform/rules/dependency-tampering)
* [Tool poisoning (malicious instructions in metadata)](/flintai/platform/rules/tool-poisoning)
* [Untrusted third-party MCP servers](/flintai/platform/rules/untrusted-third-party-mcp-servers)