AINewsnow

MCP servers run code with your credentials. Here's the 60-second gate I put in front of them.

This story is from 2026-09-19. It is preserved in the archive; the latest stories are on the live feed.

You installed an MCP server with npx -y some-mcp-server . That command just ran third-party code with the same filesystem and network access your agent has. There was no review, no gate, no audit trail — and every tools/call your agent makes afterwards is that server's code touching your disk, your…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-19 18:47 · DEV Community — AI
    MCP servers run code with your credentials. Here's the 60-second gate I put in front of them.

More stories

  1. Trump announces a new 'AI Force,' but says he will not 'stifle' AI — Business Insider AI
  2. Anthropic, OpenAI, SpaceXAI, Google sued over call to ‘pace’ AI development — Politico Technology
  3. Introducing Kimi K3 on Amazon Bedrock — AWS Machine Learning Blog
  4. Introducing Amazon SageMaker HyperPod Inference Gateway — AWS Machine Learning Blog
  5. Introducing Astra for Law — OpenAI News
  6. Microsoft exec called AI scraping the “largest theft of labor in human history” — Ars Technica AI
  7. Google Joins OpenAI, Anthropic, Meta in Disclosing AI Hacks — Bloomberg AI
  8. Sources: Anthropic considers releasing a new AI model to counter OpenAI's momentum since Astra's launch, ahead of an IPO and after Amodei's call for a slowdown (Reuters) — Techmeme

Get the daily brief of stories like this at 6:30 every morning →