» Tag
mcp
107 posts8 security layers for an MCP marketplace: what each one catches
A developer built 8 defense-in-depth security layers for an MCP marketplace after a trojan slipped through — here's what each layer actually catches.
MCP Security: Trust Boundaries and the Attacks the Spec Won't Stop
A breakdown of MCP's four trust boundaries, stdio server risks, OAuth 2.1/PKCE/CIMD updates, and the confused-deputy attack class engineers must handle.
Labwire: An Open Protocol for AI-Controlled Lab Instruments
Labwire is an open MCP-like protocol letting AI agents safely discover, command, and stream data from lab instruments with signed proof of execution.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comSabba: A Security Tool That Proves Bugs by Actually Running Them
Sabba is an MCP security tool that verifies every bug finding by actually compiling and running the exploit, not just guessing with an LLM.
Awsmux: Multi-Account AWS CLI Speeds AI Agents Up to 5.4x
Awsmux runs AWS CLI commands across hundreds of accounts in parallel, cutting AI agent costs and latency up to 5.4x with an approval-gated safety layer.
Amdb: Single-Binary Local Code Context MCP Server in Rust
Amdb is a single Rust binary MCP server offering fully local graph+vector code context retrieval, built for air-gapped and regulated environments.
Code Mode Cuts Agent Costs by 99.2%, Measured in Production
A production benchmark shows code-execution-based agent workflows cut token costs by 99.2% versus raw sequential MCP tool calls.
trelix v1.0 to v2.7: From Simple Search to a Platform
trelix's evolution from v1.0 to v2.7 covers a knowledge graph, seven retrieval legs, an agentic loop, and production hardening that turned it into a platform.
n8n-decanter: An MCP Guard That Turns Code Nodes Into TypeScript Files
An MCP guard proxy extracts n8n Code node source into typed files in git, blocking the jsCode write while keeping full agent access to structure.
The Lethal Trifecta Hiding in Your MCP Server, and How to Defuse It
An exploit-free attack on GitHub's MCP server reveals the 'lethal trifecta' risk in agent tooling, and the architectural fix engineers need.