mcp
3 posts tagged mcp. Atom feed for this tag.
- If the model refused the attack, why isn't the server safe? A refusal is the model's call, and the model's call can change. mcploitable is a lab of deliberately vulnerable MCP servers built to show where that stops mattering: 105 attempts at the correct control, zero through.
- Why does my MCP server run fine in a terminal but refuse to connect? The client parses everything on your stdout as JSON-RPC. Your log lines are not JSON-RPC.
- Why does my MCP server call the tool I told it never to call? The system prompt is advice to the model. Nothing between the model and the API ever reads it, so the checks have to live in code.