Skills
Audit installed MCP servers against the 2026 baseline: auth, command injection, plaintext credentials
A 2026 audit found 40% of MCP servers still require no authentication, 43% remain vulnerable to command injection, and 79% handle credentials in plaintext. Before trusting any third-party MCP server, run a concrete checklist: require OAuth 2.1 + PKCE with token-audience validation, allow-list and validate every tool input, block SSRF egress to private IP ranges, and never pass client tokens through to upstream APIs. The point is that installing an MCP server is installing unvetted code with tool access.
Source
↳ Follow the thread