Archive

MCP security scanner targets trust boundary, not just prompt injection

The post reframes MCP defense away from input filtering toward hardening server-side handlers, arguing that a safe handler is a structural wall while input filtering is only a sieve — a distinction that changes where security effort should be concentrated.