Non-Containerized MCP Server is detected in IDE

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_372
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server configured in a developer's IDE runs directly on the developer's host machine (via npx, node, python, or uvx) without container isolation. If compromised, the server has full access to the developer's file system, environment variables, network, credentials, and potentially the corporate network.