Brief

A security scan of 500 servers on the MCP registry Smithery revealed that 15.3% of them contained security vulnerabilities. These findings include critical issues like file-disguise vectors and tool description injections, with one in six servers exhibiting toxic flows that form complete attack paths. Notably, some well-known services such as Slack, Google Sheets, and AWS documentation were found to have high-severity issues, indicating that even actively maintained and recognizable servers are not immune to these security risks. AI

A new tool called "my-tool" automates the process of registering and marketing MCP servers across multiple platforms. It handles submissions to the MCP Registry, Smithery, and GitHub Topics, and also manages social media posts on channels like Bluesky and Dev.to. The tool includes a strict content filter to remove marketing buzzwords and ensures posts adhere to platform-specific length limits. AI