
MCP Security: What to Check Before You Connect a Server (2026)
The real attack surface MCP introduces: tool description poisoning, over-privileged servers, and unvetted third-party connections. Includes a verified walkthrough of the Supabase MCP prompt-injection demonstration and a scoping checklist.







