The State of MCP Security [pdf]
mavzer
26 points
2 comments
July 12, 2026
Related Discussions
Found 5 related stories in 572.9ms across 14,015 title embeddings via pgvector HNSW
- MCP is dead; long live MCP CharlieDigital · 105 pts · March 14, 2026 · 60% similar
- MCP is dead? nadis · 151 pts · May 29, 2026 · 58% similar
- MCP Hello Page Dachande663 · 74 pts · May 16, 2026 · 56% similar
- Show HN: Only 1 of 4,356 reachable MCP servers is ready for the 2026-07-28 spec roee_tsur · 21 pts · July 12, 2026 · 56% similar
- When does MCP make sense vs CLI? ejholmes · 339 pts · March 01, 2026 · 53% similar
Discussion Highlights (1 comments)
shitloadofbooks
I couldn't find anything else to do exactly what I wanted (or wasn't just a blatent rugpull towards "enterprise pricing" waiting to happen) so I slopped together an MCP Proxy that uses FastMCP to proxy a list of upstream MCPs behind Entra oauth, with CEL-expressions for per-tool RBAC. The peace of mind it brought not trusting other people's slopped out MCPs to do the right thing with authentication is immense. It's internal only, but it was a Fable 5 one-shot (3 shot if you count a second prompt to generate the Helm Chart and docs site) that you could DIY because the FastMCP library is extremely sensible and well-documented.