mavzer
- Karma
- 0
- Created
- ()
- Submissions
- 0
- Show HN: Get a security assessment of MCP servers directly from your terminal (index.canopii.dev)
I built a deterministic scanner that catches command injection, prompt-injection markers in tool descriptions, over-broad/destructive tools, and committed secrets in MCP servers before you connect them. It continuously…
- The State of MCP Security [pdf] (canopii.dev)
- Show HN: A Trust Index for MCP Servers (index.canopii.dev)
As a security professional whose employer has given Claude and various other AI tooling to everyone at the company, I kept finding myself as the bottleneck because my team had to review sometimes 4-5 repositories of MCP…