Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-17 · source-backed
Inspect all tool metadata for hidden instructions and Base64 payloads. Pin tool definitions with hash verification (mcp-scan from Invariant Labs). Isolate MCP servers in Docker with --read-only --cap-drop ALL. Disable auto-approve in production. Log all invocations. Elastic Guide
Each link below shares sources, entities, or timing with this story.
MCP uses Docker / Shared entity: Docker / Same source / Shared topic / What happened next
Linked by a graph relationship (MCP uses Docker); both cover Docker; cite the same source (Elastic Guide).
MCP uses Docker / Shared topic / Tension
Linked by a graph relationship (MCP uses Docker); overlapping topics (against, instruction, tool); pushes against this story (against).
Docker supports Claude Code / Shared topic / Tension
Linked by a graph relationship (Docker supports Claude Code); overlapping topics (against, instruction, tool); pushes against this story (against).
MCP uses Docker / Shared entity: Disable / What happened next
Linked by a graph relationship (MCP uses Docker); both cover Disable; picks up the Disable thread on 2026-07-13.
MCP uses Docker / Shared entity: Invariant Labs / What happened next
Linked by a graph relationship (MCP uses Docker); both cover Invariant Labs; picks up the Invariant Labs thread on 2026-03-15.
Docker supports Claude Code / Shared entity: Invariant Labs / What happened next
Linked by a graph relationship (Docker supports Claude Code); both cover Invariant Labs; picks up the Invariant Labs thread on 2026-03-15.
Linked by a graph relationship (Docker supports Claude Code); both cover Invariant Labs; picks up the Invariant Labs thread on 2026-03-05.
Docker supports Claude Code / Shared entity: Docker / What happened next
Linked by a graph relationship (Docker supports Claude Code); both cover Docker; picks up the Docker thread on 2026-03-28.