hackwither_

reap / rules

Rule catalog

19 checks for AI agent endpoints. Each finding REAP reports carries one of these IDs. IDs are frozen once shipped, so each page here is a permanent link.

REAP rules per OWASP Agentic Top 10 category: ASI01 0, ASI02 3, ASI03 7, ASI04 0, ASI05 1, ASI06 0, ASI07 2, ASI08 1, ASI09 6, ASI10 0 01 ·mcp-unauth-tools-listmcp-resources-prompts-exposuremcp-tmpl-high-risk-tool-names 02 3mcp-unauth-tools-listmcp-oauth-metadata-posturemcp-oauth-bearer-challenge-missingmcp-redirect-uri-laxitymcp-session-id-entropymcp-host-header-validationhttp-cors-wildcard 03 7 04 ·mcp-tmpl-high-risk-tool-names 05 1 06 ·transport-plaintexttransport-downgrade 07 2http-rate-limit-absence 08 1mcp-tool-capability-surfacemcp-enumeration-blockedmcp-dynamic-dispatchmcp-instructions-exposuretls-cert-healthmcp-tmpl-server-header-fingerprint 09 6 10 ·
Fig. 1 Rules citing each OWASP Agentic Top 10 category, one square per rule. Pink: ASI03, identity and privilege abuse. Categories at zero describe runtime behaviour, such as goal hijack or memory poisoning, that recon without invocation can’t observe.

Recon: capability surface

mcp-auth-postureMCP enumeration auth posture: open, auth-gated or unreachable—
mcp-tool-capability-surfaceTool capability inventory (3 tools)ASI09
mcp-enumeration-blockedTool enumeration blocked by authenticationASI09
mcp-unauth-tools-listMCP tool listing accessible without authenticationASI02 ASI03
mcp-resources-prompts-exposureUnauthenticated resources/list returns 1 item(s)ASI02
mcp-dynamic-dispatchEnumerated MCP tool surface is likely incomplete (dynamic dispatch detected)ASI09
mcp-instructions-exposureMCP handshake returns lengthy or sensitive-flavored instructionsASI09

Auth and session posture

mcp-oauth-metadata-posturePublished OAuth metadata does not advertise PKCEASI03
mcp-oauth-bearer-challenge-missingProtected resource does not send a Bearer WWW-Authenticate challengeASI03
mcp-redirect-uri-laxityOAuth redirect URI registration appears overly broadASI03
mcp-session-id-entropyMCP session ID entropy looks weak or predictableASI03
mcp-host-header-validationMCP accepted initialize with a mismatched Host headerASI03

Transport posture

transport-plaintextAgent endpoint served over plaintext HTTPASI07
transport-downgradePlaintext agent listener alongside TLS on the same hostASI07
tls-cert-healthTLS certificate, protocol and cipher health on agent endpointsASI09
http-cors-wildcardPermissive CORS policy on agent endpointASI03
http-rate-limit-absenceNo standard rate-limit headers observedASI08

Templates

mcp-tmpl-high-risk-tool-namesTool list includes names suggesting code execution or filesystem accessASI02 ASI05
mcp-tmpl-server-header-fingerprintServer response header discloses backend/edge softwareASI09

Third column: OWASP Top 10 for Agentic Applications (2026) categories. Why each is cited: ASI mapping rationale.