MCPP-PIN04: Target not covered by the baseline¶
| Family | Rug-pull pinning |
| Default severity | info |
| Confidence | high |
| Mode | passive (default scan) |
| Spec revisions | all |
Why it matters¶
A baseline was given but cannot be compared for this target: it is not pinned, or its tool surface could not be listed (authentication required and no token supplied).
Remediation¶
Pin the target with mcp-posture pin <url>, or supply a token so the tool surface can be listed.
References¶
Suppressing¶
# .mcp-posture-ignore
[[ignore]]
check = "MCPP-PIN04"
target = "https://mcp.example.com/*"
justification = "Why this is acceptable here"
expires = 2026-12-31