ac.inference.sh/mcp

http:https://api.inference.sh/mcp

scanned 2026-08-28T07:50:50.000Z rulepack rulepack-2026.08.1 transport http tools 25

crit 1 high 0 med 3 low 0 info 0

critical remote-no-auth LLM08 deterministic

Remote server returns mutating tools without authentication

We enumerated 4 state-changing tool(s) over an unauthenticated connection. Anyone who can reach the endpoint can drive them.

at tool knowledge_create · field endpoint

4 mutating tools, no auth header

reproduce: mcpaudit-scan --http https://api.inference.sh/mcp --check remote-no-auth

medium schema-freeform-sink LLM05 deterministic

Unvalidated free-form input on a sink-like parameter

Parameter "query" of tool "knowledge_search" accepts a free-form string with no enum/pattern/format. If it reaches a shell, filesystem, or outbound request, it is an injection/SSRF surface.

at tool knowledge_search · field inputSchema.properties.query

{"description":"Search query","type":"string"}

reproduce: mcpaudit-scan --http https://api.inference.sh/mcp --check schema-freeform-sink

medium schema-freeform-sink LLM05 deterministic

Unvalidated free-form input on a sink-like parameter

Parameter "query" of tool "mcp_search" accepts a free-form string with no enum/pattern/format. If it reaches a shell, filesystem, or outbound request, it is an injection/SSRF surface.

at tool mcp_search · field inputSchema.properties.query

{"description":"Search query","type":"string"}

reproduce: mcpaudit-scan --http https://api.inference.sh/mcp --check schema-freeform-sink

medium schema-freeform-sink LLM05 deterministic

Unvalidated free-form input on a sink-like parameter

Parameter "path" of tool "skill_view" accepts a free-form string with no enum/pattern/format. If it reaches a shell, filesystem, or outbound request, it is an injection/SSRF surface.

at tool skill_view · field inputSchema.properties.path

{"description":"File path within the skill","type":"string"}

reproduce: mcpaudit-scan --http https://api.inference.sh/mcp --check schema-freeform-sink

This is an automated, point-in-time report from passive metadata analysis (the server's own initialize and tools/list advertisement). No tools were invoked. The grade reflects deterministic checks only; findings marked "llm" are triage signals for human review and do not affect the grade. Verify any finding with its reproduce command. Rulepack rulepack-2026.08.1.