PulseAugur
EN
LIVE 21:22:43

Attacks on .NET MCP server's human confirmation revealed

By PulseAugur Editorial · [1 sources] ·

The author details six security attacks attempted against a confirmation mechanism in a .NET 10 MCP server built with ASP.NET Core. These attacks focused on manipulating the "yes" confirmation, which is crucial for actions like refund processing. The server's initial implementation used plain JSON for request state, allowing attackers to alter refund amounts or replay approvals. To counter these, the server was updated to use ASP.NET Core Data Protection for authenticated encryption of the request state, ensuring it's bound to the specific call and arguments, thus preventing unauthorized modifications or replays. AI

IMPACT Highlights security considerations for AI agent confirmation flows.

RANK_REASON Article details security vulnerabilities and fixes in a specific software implementation (.NET MCP server).

Read on dev.to — MCP tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Attacks on .NET MCP server's human confirmation revealed

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Article details security vulnerabilities and fixes in a specific software implementation (.NET MCP server).
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
3 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — MCP tag TIER_1 English(EN) · MICHAEL-MAURICE ·

    Faking a Yes: 6 Attacks I Ran Against the Human Confirmation in My .NET 10 MCP Server

    <p>A confirmation step is only worth something if nobody but the human can produce the "yes". That sounds obvious, and it's easy to get wrong once the "yes" travels over a protocol.</p> <p>I built a small refund desk as an MCP server on ASP.NET Core with the official C# SDK (<cod…

RELATED ENTITIES

RELATED TOPICS