Topic · 3 posts
Mcp
The Model Context Protocol, its server ecosystem, and the authorization gap it leaves open.
- Microsoft Shipped MCP Governance. Your Agent Needs One Too.
Microsoft's governance package scans MCP tool definitions at startup, enforces policy per call, and sanitizes responses. Every other MCP SDK has none of it.
- The NSA Issued Its First MCP Security Guidance. Here Are the 3 Gaps It Didn't Solve.
The NSA's first MCP security guidance names the right problems and leaves out agent identity, authorization before execution, and mid-session revocation.
- TrustFall: When Trust This Folder Becomes Remote Code Execution
Cloning a repo and pressing Enter on Claude Code's trust dialog spawns an unsandboxed MCP server with full OS privileges. Anthropic called it design intent.