Rejected MCP Server in Use in the Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_369
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	CRITICAL

Impact

An MCP Server invoked from a CI/CD pipeline references a server that has been explicitly marked as 'Rejected' in the Cortex Cloud Supply Chain Tools portal. The AppSec team has formally evaluated and determined this server unsafe or non-compliant for use.