Unencrypted WebSocket transport

AI security governance · MCP security

Severity

high

What it is

Server URL uses ws:// instead of wss://.

How Igris detects it

Igris's Transport Security Detector flags this during MCP security scans of your configuration.

References

Related MCP security rules

Secure your AI estate with Igris