[mavzer]

Nice. Basically, I see 3 ways the MCP ecosystem converging

- Centralized, well trusted sources for MCP servers - Technical people like you creating their own, private MCPs for specific use cases - An MCP governance layer that brings a bit of sense into this new world

Otherwise, it’s a security time bomb. We already see MCP specific attacks out in the wild.

[pjmlp]

MCP is basically web services for AI tools, thus the same care should be in place for security, unfortunely that isn't what happens, thus as usual DevSecOps will have lots of fun.

[mavzer]

100%!! All AI tooling (MCPs, skills, models etc) has to go through the same scrutiny applied to any other web service. But as always, security is an afterthought that comes back to bite.