Posts tagged with “mcp”

A security check existed, but one write path never called it. The paths that did could still disagree with Nginx about what a directive was.

The requests succeeded. The sessions never left. What the MCP Python SDK's retention bug says about resource ownership and green dashboards.

A dead protocol revision, fossilised in a stable SDK's type system. Why hasattr is not feature detection, and the ninety-second habit that catches the whole class.

I predicted eighteen months of governance debt. It was called in one quarter. Six January claims, graded without mercy, against February's malware, April's RCE, and today's spec.

The tenant check passed. There was no tenant — or it was someone else's. Why async tasks are where per-request governance dies, silently and by default.

MCP's biggest revision made the governance layer opt-in and off by default. Everything that keeps an agent honest is now yours to turn on.

You withdrew the tool. The agent is still holding last week's menu. Why MCP governance can only live where the call is mediated.

OpenClaw got patched twice and still couldn't tell you what it did. That's not a security gap — it's a missing flight recorder. And the EU just gave everyone sixteen more months to pretend that's fine.

Nine seconds. One curl. A startup's production data and all its backups, gone. The agent wrote a confession afterward — and the confession was the least useful part. Same architecture failure, third time this year.

Twenty-two thousand MCP servers. Zero mandatory security checks. The protocol won — the trust layer never shipped. An audit of what's actually exposed.

You pasted logs into ChatGPT and got a plausible RCA. It's wrong. What changes when your LLM can query the observability stack directly — and what new failure modes that creates.

5,300 measurements, 6 scenarios. The headline is 19.6× speedup — the real findings are that stdio isn't serial, framework overhead is zero, and a hardcoded constant was capping your throughput.

Everyone's plugging unvetted MCP servers into production LLMs. Nobody's asking who's liable when they leak credentials or delete data. The governance gap enterprises are ignoring.