Published work tagged MCP Security.
After the OpenCode breach, revoke AI API keys at the provider, set hard spend limits, use one key per tool, and keep secrets out of MCP config files and agents.
How to apply least privilege to your agent's MCP tools: default-deny allowlists, narrow scopes, per-server credentials, approval for writes, and a runtime gate.
This checklist shows how to vet an MCP server before an agent touches it, from provenance and reading a published grade honestly to auth, version pinning and cr…
Hands-on red team guide to auditing and exploiting AI agents in 2026. Covers indirect prompt injection, EchoLeak markdown exfiltration, MCP tool description rug…
Point-in-time MCP grades find risk; runtime firewalls enforce policy on tool calls. Andrax mcpgrade-1.4.0 vs Guard mcpgrade-2.0.0 — no score equating.
Andrax Pentester is not Android ANDRAX — we are a cybersecurity education site and MCP security grader at andraxpentester.in. Clear the name collision in one mi…
Learn how to build and deploy an enterprise-grade Zero-Trust Sandbox Firewall for Model Context Protocol (MCP) servers in TypeScript. Prevent Indirect Prompt In…
An exhaustive analysis of critical security flaws in AI agent MCP bridges and eBPF kernel instrumentation, featuring empirical exploitation mechanics, detection…
Master Model Context Protocol (MCP) security auditing. Build automated Python static AST and JSON-Schema analyzers to detect indirect prompt injection and tool…
Learn how to build zero-trust FastMCP servers in Python and harden Next.js 16 AI agent architectures against indirect prompt injection, tool poisoning, and unau…
