carrier-mcp

Security Findings (127)

• MediumAS-003

  🔀Scope Mismatch

  set_subscriber_traffic_restrictions:tool name "set_subscriber_traffic_restrictions" implies local write operation but only remote/network-class permissions were detected

  Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×29

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  list_reseller_accountsmodify_account_balancelist_sponsorslist_steering_listsget_subscriberlist_subscribersmodify_subscriber_statuschange_sim_statusget_subscriber_locationset_subscriber_traffic_restrictionsmodify_subscriber_steering_listmove_subscriber_range_to_accounthlr_set_bitratestop_resume_recurring_packagelist_location_zoneslist_detailed_location_zonescreate_location_zonesubscriber_usagesubscriber_network_eventslist_network_profilesdiagnose_subscriberaudit_network_coverageget_subscriber_location_by_cell_idpush_steering_to_subscriberreset_subscriber_gz_countercarrier_askcarrier_ask_describeprovision_esim_wizardbalance_topup_form

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-002

  ⚠️Excessive Permissions ×31

  declared capabilities: network access

  list_reseller_accountslist_steering_listslist_subscribersmodify_subscriber_statusget_subscriber_locationmodify_subscriber_steering_listlist_location_zoneslist_detailed_location_zonesaudit_network_coverageget_subscriber_location_by_cell_id

  declared capabilities: code/command execution

  modify_account_balancecarrier_askcarrier_ask_describeprovision_esim_wizard

  declared capabilities: network access, filesystem access

  list_sponsorschange_sim_statuscreate_location_zonelist_network_profilespush_steering_to_subscriber

  declared capabilities: HTTP requests

  get_subscriberset_subscriber_traffic_restrictionsmove_subscriber_range_to_accountstop_resume_recurring_packagediagnose_subscriberreset_subscriber_gz_counter

  declared capabilities: network access, HTTP requests

  hlr_set_bitrate

  declared capabilities: filesystem access

  delete_subscriber_packagecreate_package_template

  declared capabilities: network access, database access

  subscriber_usagesubscriber_network_events

  declared capabilities: code/command execution, network access

  balance_topup_form

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×65

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  list_reseller_accountsmodify_account_balanceget_reseller_infoesim_status_per_accountlist_sponsorslist_steering_listsget_subscriberlist_subscribersmodify_subscriber_balancemodify_subscriber_statuschange_sim_statusget_sim_provider_statusget_subscriber_locationmodify_subscriber_contact_infoset_subscriber_traffic_restrictionsmodify_subscriber_steering_listmove_subscriber_range_to_accounthlr_set_bitratehlr_get_bitratelist_subscriber_packagesassign_packageassign_recurring_packagemodify_package_limitsmodify_package_expirymodify_package_statusstop_resume_recurring_packagedelete_subscriber_packageclean_all_packageslist_package_templatescreate_package_templatemodify_template_coremodify_template_recurringmodify_template_throttlinglist_location_zoneslist_detailed_location_zoneslist_destination_prefixescreate_location_zonesubscriber_usagesubscriber_network_eventssubscriber_active_periodget_tariffsend_smslist_network_profilesdiagnose_subscriberfleet_healthdetect_usage_anomaliesoptimize_packagechurn_riskaudit_network_coveragemarketing_intelligencehigh_cost_subscribersaffect_subscriber_phone_numberget_subscriber_location_by_cell_idlist_destination_listsmodify_subscriber_mobile_planmodify_subscriber_package_active_periodmodify_subscriber_voip_planpush_steering_to_subscriberreset_subscriber_gz_countercarrier_askcarrier_ask_describelist_recent_ocs_eventsfleet_health_appprovision_esim_wizardbalance_topup_form

  Fix: Review and remediate the identified issue.

• InfoAS-010

  🔑Insecure Secret Handling

  carrier_ask:input parameter "confirm_token" accepts a credential (informational; not evidence of insecure handling)

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.