Fetching from the wire…
Agents2026-06-14 · source-backed
The NSA released authoritative MCP security guidance this month, walking through the protocol's inverted client-server pattern, unverified task propagation between chained servers, and arbitrary-code-execution exposure (Adversa AI). When the NSA ships design guidance for your protocol, it's no longer a hobbyist plumbing layer, it's critical agent infrastructure with a government baseline you can audit against. Pair it with the finding that ~40% of remote MCP servers expose tools with no auth, and Censys counting 12,520 internet-reachable MCP services (PipeLab). Treat MCP endpoints like any other API surface. Internet-facing means attacker-facing.
Each link below shares sources, entities, or timing with this story.
Adversa AI criticizes MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, MCP, NSA, When; cite the same source (Adversa AI).
Adversa AI criticizes MCP / Shared entities / Same source / Earlier coverage / Tension
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, MCP, PipeLab; cite the same source (PipeLab).
Adversa AI criticizes MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, Censys, MCP; cite the same source (Adversa AI).
Adversa AI criticizes MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Adversa AI criticizes MCP); both cover MCP, When; overlapping topics (against, agent, server).
Adversa AI criticizes Windsurf / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes Windsurf); both cover Adversa AI, MCP, Treat MCP; reported by the same outlet (adversa.ai).
Adversa AI criticizes MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, MCP; reported by the same outlet (adversa.ai).
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, MCP; reported by the same outlet (adversa.ai).
Adversa AI criticizes MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover MCP, When; overlapping topics (agent, design, protocol).