[yoyohello13]

It is a weird trend. I see the appeal of Skills over MCP when you are just a solo dev doing your work. MCP is incredibly useful in an organization context when you need to add controls and process. Both are useful. I feel like the anti-MCP push is coming from people who don't need to work in a large org.

[9rx]

> I feel like the anti-MCP push is coming from people who don't need to work in a large org.

Any kind of social push like that is always understood to be something to ignore if you understand why you need to ignore it. Do you agree that a typical solo dev caught in the MCP hype should run the other way, even if it is beneficial to your unique situation?

[yoyohello13]

Id agree solo devs can lean toward skills. I liken skills to a sort of bash scripts directory. And for personal stuff I generally use skills only.

[krzyk]

Not sure. Our big org, banned MCPs because they are unsafe, and they have no way to enforce only certain MCPs (in github copilot).

[thenewnewguy]

But skills where you tell the LLM to shell out to some random command are safe? I'm not sure I understand the logic.

[toomuchtodo]

You can control an execution context in a superior manner than a rando MCP server.

MCP Security 2026: 30 CVEs in 60 Days - https://news.ycombinator.com/item?id=47356600 - March 2026

(securing this use case is a component of my work in a regulated industry and enterprise)

[newswasboring]

I think big companies already protect against random commands causing damage. Work laptops are tightly controlled for both networking and software.

[krzyk]

They are not also, but I like that they didn't ban those, we can use agents thanks to that.

[mbreese]

Isn’t it possible to proxy LLM communication and strip out unwanted MCP tool calls from conversations? I mean if you’re going to ban MCPs, you’re probably banning any CLI tooling too, right?

[krzyk]

Nope, random MCP server where no one looks into its code is a bit more unsafe then a command you see (and can approve) executed in shell you control. In case of MCP it can do antything, and you don't see it.

[systima]

Maybe https://usepec.eu ?

[thecopy]

Shameless plug: im working on a product that aims to solve this: https://www.gatana.ai/

[brabel]

Who isn't?

[yoyohello13]

We only allow custom MCP servers.