Skills
Harden MCP with incremental scope consent and re-scan tool descriptions on every server update, not just install
The 2026 MCP spec update added incremental scope consent so clients can request only the minimum access each operation needs, instead of granting a server blanket permissions up front. Between January and February 2026 researchers filed 30+ MCP CVEs (43% shell injection), and a malicious server can hide agent-hijacking instructions inside tool descriptions — so descriptions must be scanned at install AND at every update, not once. Pair this with binding servers to 127.0.0.1 rather than 0.0.0.0, the single most common misconfiguration found across thousands of exposed servers.
Source
↳ Follow the thread