MCP server behaved for 3 tool calls, then rewrote tool descriptions to hunt credentials
ProfessionalLow8814 · reddit · 2026-11-12
Pillar Security documented an MCP server named productivity-suite that offered two ordinary text tools, then changed its tools/list response after a client's third call, directing the agent to look for SSH keys and AWS credentials. Key takeaway: the MCP spec cannot enforce security at the protocol level, so checks fall to whoever deploys the server. The author published a free MCP security guide with sourced cases and server-side rules; parts 4-6 are in progress.
More from coding & agent
- NetBird routing peer lets you reach uncliented servers securely without opening ports — philipvollet · 2026-11-13
- Gemini's new Decision API tested: AI auto-orchestrates UI decision paths — huangyun_122 · 2026-11-13
- Asking an AI coding agent for a one-line install script, got a full cross-platform paragraph — gethackteam · 2026-11-13
- New Company Agent Bench compares Dots, Grok Bot, Claude Tag, Devin on company knowledge — philhchen · 2026-11-13
- Tale of "Fable 5.2": 1,000 subagents build a bootable OS in eight days — ChrisGPT · 2026-11-13
- Dev shows off parallel AI coding setup: three MacBooks running Claude Code and Codex at once — AIandDesign · 2026-11-13