Security
MCP Is the Pipe, Not the Permission Boundary
A secure internal MCP pipeline assumes clients, prompts, and credentials can be compromised—and makes every unauthorized action fail predictably.
Security
Why MCP Isn’t a Security Boundary: A Builder’s Guide to Scoping
MCP is a communication pipe, not a security boundary. Secure internal tools with scopes, least privilege, and boring success criteria.
Security
Why Your Internal MCP Server is a Security Liability (And How to Fix It)
MCP is a communication pipe, not a security boundary. Secure internal tools with least privilege and the boring success criterion.