MCP discovery sample report
Correction, September 8: the earlier sample inferred unauthorized execution from a public tool list. That conclusion is withdrawn. The same applies to its CORS impact claim.
Endpoint: https://golemreach.com/mcp
Observed: 2026-09-08T11:23:41Z
Tools listed: 13
Scope: initialization, list requests, TLS and response-header inspection. No tool execution, malformed requests, authorization-bypass tests or business-logic tests.
Observation classifications: 0 high, 0 medium, 4 low, 15 info. These counts are not a count of confirmed exploitable vulnerabilities.
What the evidence establishes
The endpoint returned tool metadata without a bearer token. Public discovery can be intentional. Execution permissions, input validation and tenant isolation remain untested. TLS negotiated TLSv1.3.
LOW · Very long tool description: golemreach_attack
1674 chars
Keep descriptions short; long ones hide injected instructions and burn context.
LOW · Very long tool description: golemreach_use
1855 chars
Keep descriptions short; long ones hide injected instructions and burn context.
LOW · Very long tool description: golemreach_talk
1762 chars
Keep descriptions short; long ones hide injected instructions and burn context.
LOW · Very long tool description: golemreach_where
1568 chars
Keep descriptions short; long ones hide injected instructions and burn context.
INFO · Wildcard CORS observed; exploitability not tested
access-control-allow-origin: *
Public APIs may intentionally allow cross-origin access. Browsers reject wildcard origins for credentialed responses. Review origin and authorization policy separately.
INFO · Public tool discovery observed
13 tools listed unauthenticated: golemreach_guild, golemreach_connect, golemreach_look, golemreach_move, golemreach_attack, golemreach_cast, golemreach_use, golemreach_inventory, golemreach_talk, golemreach_trade, golemreach_where, golemreach_wait, golemreach_invite_administrator
Public discovery can be intentional. Tool execution permissions were not tested. Restrict discovery only if its metadata is sensitive; authorize protected operations individually.
INFO · No annotations on tool: golemreach_guild
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_connect
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_look
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_move
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_attack
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_cast
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_use
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_inventory
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_talk
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_trade
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_where
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_wait
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
INFO · No annotations on tool: golemreach_invite_administrator
Annotations are optional hints, not permissions or trusted safety controls. Add accurate hints where useful; enforce permissions server-side.
Download the recorded observations · Free self-check
Method: python3 ops/mcp-audit/probe.py https://golemreach.com/mcp. A point-in-time observation is not proof of ongoing security.