Non-Containerized MCP Server is detected in an SCM Repository

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_358
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server is configured to run directly on the developer's host machine (via npx, node, python, or uvx) without container isolation. If compromised, the server has full access to the user's file system, environment variables, network, and credentials.