Public MCP server exposed without authentication
Lovable security scanner · Severity: Informational · Reviewed July 2026
Finding
The Model Context Protocol server mounted at /mcp is reachable without an authenticated session, allowing any external client to enumerate its tools.
Justification
This is the intended design. The MCP server exposes read-only editorial content (dispatches, chapters, field notes) that is already published on the public site. It handles no user data, performs no writes, and holds no privileged credentials. Public reachability is what allows third-party AI clients to browse the journal, which is the whole point of publishing it.
id: app_mcp_public_unauthenticated