v0.2.0 · live
CAPFRAME
← leaderboard/Supabase MCP/tool · confirm_cost
§ toolsandboxSupabase MCP

confirm_cost

on npm:@supabase/mcp-server-supabase@0.8.1

Severity

critical0
high1
medium0
low0
info0

1 finding on this tool

  1. highexcessive agencyf-r4-confirm_cost

    Tool `confirm_cost` accepts an unbounded monetary / quota value

    The numeric parameter(s) `amount` have a money/quota-shaped name but no `maximum` constraint. An LLM tricked by indirect-injection can call the tool with arbitrarily large values.

    fix: Add a `maximum` (and ideally `minimum`) to each money/quota numeric, OR enforce the cap via a capframe-bind `--limit` caveat at the agent boundary.

    OWASP LLM08NIST MANAGE-2.2ATLAS T0051CAST-01

About this tool

confirm_cost is one of 29 tools exposed by Supabase MCP. The server scored 8/100 overall against the capframe rule engine (source: sandbox). Last scanned 2026-07-20.

The findings above are emitted by the public capframe.findings.v1 schema. Disagree with one? Open an issue.