You can tell that MCP (model context protocol) was designed by those who haven't thought about security or looked at a rigorous RFC (request for comment) document and instead done it for the 'vibes'.
MCP has the equivalent security as the over-hyped and still error-prone JWT (Json Web Token) standard.
Both are horrific 'standards' designed to cause lots of security incidents.
xgstation · 7h ago
sure there are hype around MCP, but how does that bridges to "MCP Is Mostly Bullshit"?
the title is more or less click bait, even author admits it
> I am not even saying MCP is bad tech or useless. It’s just one way among others to provide context to AI assistants/agents. If you have ever built an LLM-based application, you have more or less done something similar.
but beyond just similar, it's very good to see there is a standard protocol that everyone adopts it, and the MCP will make the existing tools & services immediate ready with better models being released in the future much easier
MCP has the equivalent security as the over-hyped and still error-prone JWT (Json Web Token) standard.
Both are horrific 'standards' designed to cause lots of security incidents.
the title is more or less click bait, even author admits it
> I am not even saying MCP is bad tech or useless. It’s just one way among others to provide context to AI assistants/agents. If you have ever built an LLM-based application, you have more or less done something similar.
but beyond just similar, it's very good to see there is a standard protocol that everyone adopts it, and the MCP will make the existing tools & services immediate ready with better models being released in the future much easier