Guides and deep-dives on MCP security — tool poisoning, toxic flows, supply-chain risk and how to scan a Model Context Protocol server before you connect it to your data.
A beginner-friendly guide to the new free MCP Trust Checker API: what it does, how to get a key, and how to scan any MCP server over a single HTTPS request — with copy-paste examples you can run in two minutes.
Read more →A complete 2026 guide to MCP security: why tool descriptions are a new attack surface, the six main risk categories, and how to actually check a server before you trust it.
Read more →A step-by-step guide to scanning any MCP server for prompt injection, tool poisoning, and supply-chain risk with one free npx command — no signup required.
Read more →How hidden instructions in MCP tool descriptions hijack AI agents — the five attack shapes defenders should recognize, why "looks clean" is not clean, and how to detect poisoning deterministically.
Read more →How the lethal trifecta assembles itself from benign MCP tools, why single-tool scanners miss cross-tool composition, and how a static toxic-flow graph proves the exfiltration primitive before an attacker uses it.
Read more →How to vet npm and PyPI MCP servers before you install them — and how hash-pinning the tool surface and the artifact bytes catches a rug pull, even a same-version republish.
Read more →An MCP server exposes exactly three primitives — tools, resources, and prompts. Here is what each one does, how the client and model use them, how capability negotiation works at connect time, and why tool descriptions are a security concern.
Read more →A clear-eyed comparison of MCP vs API and plain function calling: what MCP standardizes, the M×N to M+N argument, when a direct API call is simpler, and the new trust surface a reusable server introduces.
Read more →A practical, client-agnostic walkthrough for connecting an MCP server to Claude Desktop or Claude Code: config file locations, the exact mcpServers JSON for stdio and HTTP transports, restart-and-verify steps, and the common gotchas that make a server fail to show up.
Read more →A practical, developer-focused tutorial on how to build an MCP server: choosing a transport, declaring tools, resources, and prompts, a minimal TypeScript SDK sketch, why model-facing descriptions are an injection surface, and how to test and safely publish.
Read more →A clear, beginner-friendly-but-technical explainer of the Model Context Protocol: what MCP is, why it exists, how its client–server architecture works, what a server exposes, the two transports, and where you'll meet it in 2026.
Read more →