← Blog

MCP

6 articles about "MCP".

MCPAI 安全AI Agentauthenticationmcp-security

The July 2026 MCP Server Auth Epidemic: 12 Projects, 19 Advisories, and the Reference SDK Itself

In three weeks of July 2026, at least 12 MCP server projects plus the official MCP Python SDK shipped 19 security advisories, all pointing at the same thing: authentication and origin validation treated as optional. This isn't a run of bad luck, it's a structural gap. A source-verified inventory, the five recurring classes and their root cause, and the checklist to run before you connect any MCP server.

· 56 min read
ai-agentapi-designopenapillms-txtMCPdevelopers

How to Make a Product an AI Agent Can Operate — A Practical Checklist

If the thing getting work done for you in the future is an AI agent, your product can't be human-only — code and agents have to be able to read and use it too. This is a build checklist: an open REST API, a public OpenAPI spec, and an llms.txt — three concrete pieces, plus one SKILL.md as the source — and how an agent reads the docs and then creates listings and pulls leads on its own. Real endpoints included.

· 25 min read
claude-codetelegramMCPwindowsossultra-lab

Three Rough Edges of Running Claude Code + Telegram MCP on Windows: A 200-Line Toolkit

Running the official Telegram MCP plugin with Claude Code on Windows long enough surfaces three papercuts. None are bugs — they're gaps between OS behavior and plugin assumptions. Wrote a small toolkit to seal them, open-sourced it.

· 34 min read
MCPPrompt InjectionAI 安全OWASP開源BuildInPublic

We Audited 7 Official MCP Servers — 6 Got F

Ran prompt-defense-audit against the 7 official servers in modelcontextprotocol/servers — 12-vector check, OWASP LLM Top 10 mapping. Result: 6 servers scored F, 8 defense vectors at 100% gap rate. Cross-referenced from modelcontextprotocol/servers#3537.

· 47 min read
AI 安全MCPAI Agent開源Prompt InjectionCLICisco

We Built Lighthouse for AI Agents — One Command, 25-Vector Security Audit

66% of MCP servers have security findings, but nobody runs a security scan before deploying AI agents. We built ultraprobe — zero deps, zero cost, under 1 second. Adopted by Cisco AI Defense.

· 29 min read
AIArchitectureSaaSMulti-LLMMCP

Why Your SaaS Needs AI-Ready Interfaces: Architecture Lessons from Three Products

From Gemini-only to a Multi-LLM fault-tolerant architecture — the pitfalls, lessons, and 7 things you should do right now, validated across three Ultra Lab products.

· 53 min read