The State of MCP Security [pdf]
mavzer
26 points
2 comments
July 12, 2026
Related Discussions
Found 5 related stories in 54.9ms across 5,215 title embeddings via pgvector HNSW
- 21,000 MCP servers exposed: the protocol reaches a security inflection point Wpnx330 · 11 pts · August 16, 2026 · 68% similar
- Is MCP Good Yet? handfuloflight · 22 pts · September 01, 2026 · 59% similar
- New MCP Roadmap pentagrama · 192 pts · August 22, 2026 · 57% similar
- Show HN: Only 1 of 4,356 reachable MCP servers is ready for the 2026-07-28 spec roee_tsur · 21 pts · July 12, 2026 · 56% similar
- I graded 36 popular MCP servers on agent usability. A third got a D or F tengbyte · 31 pts · July 22, 2026 · 51% similar
Discussion Highlights (1 comments)
shitloadofbooks
I couldn't find anything else to do exactly what I wanted (or wasn't just a blatent rugpull towards "enterprise pricing" waiting to happen) so I slopped together an MCP Proxy that uses FastMCP to proxy a list of upstream MCPs behind Entra oauth, with CEL-expressions for per-tool RBAC. The peace of mind it brought not trusting other people's slopped out MCPs to do the right thing with authentication is immense. It's internal only, but it was a Fable 5 one-shot (3 shot if you count a second prompt to generate the Helm Chart and docs site) that you could DIY because the FastMCP library is extremely sensible and well-documented.