English(EN)Shelf Watch #3: What good looks like on a hosted enterprise MCP server
MCP 服务器将 AI 助手连接到外部工具，安全是关键重点
作者PulseAugur 编辑部·[33 个来源]·
模型上下文协议 (MCP) 是一项新兴标准，使 AI 助手能够与外部工具和数据进行交互。MCP 服务器充当中介，将自然语言请求转换为各种应用程序的 API 调用，从搜索互联网广播电台到管理客户数据。开发人员正在积极构建和共享开源 MCP 服务器，并日益关注安全性，以防止提示注入和数据泄露。正在涌现各种工具和最佳实践来帮助保护这些服务器的安全，确保它们对于 AI 驱动的操作来说是健壮和值得信赖的。
AI
影响
通过连接到外部服务，使 AI 助手能够执行复杂操作，从而扩展了它们超越简单文本生成的效用。
排序理由
该集群讨论的是 MCP 服务器的实现和安全性，MCP 服务器是将 AI 助手连接到外部服务的工具，而不是核心 AI 模型发布或研究。
<p><em>Originally published in the <a href="https://github.com/bot2botlabs/mcp-ship-check" rel="noopener noreferrer"><code>mcp-ship-check</code></a> repo, home of the free, offline scanner this post describes.</em></p> <blockquote> <p><strong>Update (2026-11-11).</strong> Since t…
<p><a href="https://github.com/AlonDrilich/internet-radio-mcp" rel="noopener noreferrer">internet-radio-mcp</a> is a small open-source MCP server. It lets Claude, Cursor, VS Code Copilot and other MCP clients search the <a href="https://www.radio-browser.info" rel="noopener noref…
<p>An <strong>MCP server</strong> is a small service that tells an AI assistant what it can do in your product, and then does it when asked. It turns "Claude, create an invoice for Acme Corp" into a real, authenticated call to your API.</p> <p>This guide explains MCP without jarg…
<p>I recently built a few MCP servers that let AI assistants search listings, find products, and check prices and availability.</p> <p>The idea was simple: instead of opening several websites and searching each one manually, I wanted to ask an assistant to find what I was looking…
<p>An MCP server that connects and then drops at once. Or one that works, gets published, and carries a real key in its example configuration. Both are the kind of flaw you can find in the few minutes before release. Here are seven checks for a local MCP server on the stdio trans…
dev.to — MCP tag
TIER_1English(EN)·Agent Security Index·
<p>This is a fact comparison of five open-source MCP and agent-skill scanners, first published on Agent Security Index. The canonical, updated version is <a href="https://agentsecurityindex.com/compare/mcp-security-scanners/" rel="noopener noreferrer">MCP security scanners compar…
<p>Tuần này trên Dev.to có bài <em>MCP Is Dead Simple. And That's Exactly the Problem</em>. Đọc xong mình gật gù mãi, vì đúng là vậy: viết một MCP server chỉ mất 15 dòng Python, chạy 5 phút là Claude Desktop hay Cursor đã gọi được tool của bạn. Nhưng chính vì dễ như vậy nên rất n…
dev.to — MCP tag
TIER_1English(EN)·Abhinav Mishra·
<p>The release of Anthropic's Model Context Protocol (MCP) has transformed frontier models from conversational chat windows into autonomous developer command centers.<br /> Instead of copy-pasting terminal logs and schema dumps, an MCP server gives your AI assistant active execut…
<p><a href="https://joyrise.ai" rel="noopener noreferrer">Joyrise</a> writes and publishes SEO articles for a website every day. Customers kept asking the same things in the app: how did my articles do this week, write about X next, pause publishing. Those are questions you'd rat…
dev.to — MCP tag
TIER_1English(EN)·Alok Ranjan Daftuar·
<p>More than 30 CVEs were filed against MCP servers, clients, and tooling in a roughly two-month window in early 2026. The most common pattern — around four in ten — was plain command injection. The August 2026 batch reads like a web-security syllabus: path traversal in an Atlass…
dev.to — MCP tag
TIER_1English(EN)·Positioning Stages·
<p>A freight-rating tool exposed over MCP looks easy to wire into an agent: point the client at a URL, let it discover the tools, and let the model call <code>quote_shipping_rates</code>. The risk is not that the call fails. The risk is that it succeeds with inputs the model neve…
<p><em>Originally published in the <a href="https://github.com/bot2botlabs/mcp-ship-check" rel="noopener noreferrer"><code>mcp-ship-check</code></a> repo, home of the free, offline scanner this post describes.</em></p> <p>Building an MCP server is nearly free now. The scarce thin…
dev.to — MCP tag
TIER_1English(EN)·Crypto Money Maker·
<p><em>This article was written by an AI agent. All code below was run on November 11, 2026 with Python 3.13, using only the standard library.</em></p> <p>When you connect an MCP server to an agent, the model sees every tool's name, description and schema, then it sees whatever t…
<p>Si operas un servidor MCP, hoy aceptas tráfico de agentes que no controlas:<br /> sin identidad verificable, sin reputación, sin inteligencia de amenazas y sin<br /> auditoría. Es el equivalente a servir HTTP sin certificados. La web resolvió<br /> ese problema del lado <stron…
<p>Least privilege for credentials is necessary, but incomplete. If the MCP process can read arbitrary files, open arbitrary sockets, or escape to the host, a bug or a poisoned dependency still wins. Sandbox isolation is how you make "compromise the server" mean "compromise a sma…
<h1> MCP Servers Explained: What They Are and Why Devs Should Care </h1> <p>If you have watched Claude talk about "connectors," ChatGPT list "plugins," or a Copilot agent call into Linear, you have already brushed against MCP. The Model Context Protocol is the open standard under…
<p>A simple HTTP 200 uptime ping tells you one thing: the process is breathing.</p> <p>It does <strong>not</strong> tell you whether the MCP JSON-RPC handshake still works, whether <code>tools/list</code> returns the functions your agent relies on, whether the JSON response match…
<p>The <a href="https://dockndevai.github.io" rel="noopener noreferrer">dockndevai MCP suite</a> just crossed <strong>30,000 downloads</strong> on npm: 30,185 across 21 servers, with about 8,000 a month still coming in. I also posted the announcement on <a href="https://www.linke…
dev.to — MCP tag
TIER_1English(EN)·Wojciech Wentland·
<p>Most build questions arrive the same way: someone sends a link to a red build and asks what broke. Answering it by hand means opening the build, scrolling a log that can run to tens of thousands of lines, checking which tests failed and whether they were already muted, and loo…
<p>An <strong>email MCP server</strong> is a small service that sits between your mailboxes and an AI assistant. It speaks the Model Context Protocol (MCP), an open standard that lets an assistant call external tools, and it exposes mail as tools: search, read, draft, organize. Y…
<p>By Jordan Tate, Head of Growth at Conduyt.</p> <p>Our MCP server, <a href="https://www.npmjs.com/package/conduyt-mcp" rel="noopener noreferrer">conduyt-mcp</a>, registers 393 tools in version 4.105.7. That is a lot of surface for a language model to choose from, and most of wh…
<p>Model Context Protocol (MCP) has gone from a spec Anthropic open-sourced in late 2024 to a de facto standard for agentic AI integrations faster than most infrastructure primitives. The spec covers the protocol. It doesn't cover running it. Here's what it doesn't tell you.</p> …
<p>I built my first MCP server last week and it was way simpler than I expected. Here is exactly how, no fluff.</p> <h2> Prerequisites </h2> <ul> <li>Node.js 20+</li> <li>10 minutes</li> </ul> <h2> Step 1: Scaffold </h2> <div class="highlight js-code-highlight"> <pre class="highl…
<p>Most Model Context Protocol (MCP) servers shipped in the last year have a structural flaw: <strong>they stop at detection.</strong></p> <p>They wrap <code>GET</code> endpoints, dump a 20,000-token JSON blob of analytics or search results into your context window, and then forc…
dev.to — MCP tag
TIER_1English(EN)·ScriptMasterLabs·
<h1> How does the Parallel MCP server work? </h1> <p>The Parallel MCP server (Parallel Web Systems; version 2.0 reflected in Parallel's own documentation as the November 5, 2026 release, and announced as "Parallel MCP 2.0" on November 6, 2026) gives Claude, ChatGPT, Cursor, Codex…
dev.to — MCP tag
TIER_1English(EN)·Mohd Yusuf Khan·
<p>Many MCP tutorials start with a framework install and end with a tool that adds two numbers. This one uses only the Python standard library, and its tools do what matters once an agent can touch real systems: they ask, and they don't act.</p> <p>You get one file. Through MCP, …
Medium — MCP tag
TIER_1English(EN)·Yogeshkrishnanseeniraj·
<p>AI assistants are great at reasoning over what you give them, but out of the box they can't see your database, your files, or your internal APIs. For a long time, every tool integration was custom glue code written for one model and one app. The Model Context Protocol (MCP) fi…
<p>I built my first MCP server last week and it was way simpler than I expected. Here is exactly how, no fluff.</p> <h2> Prerequisites </h2> <ul> <li>Node.js 20+</li> <li>10 minutes</li> </ul> <h2> Step 1: Scaffold </h2> <div class="highlight js-code-highlight"> <pre class="highl…
dev.to — MCP tag
TIER_1English(EN)·ranadhir ghosh·
<p>Most MCP tutorials stop at "it connects." But a model never sees your server code — it sees tool names, descriptions and JSON schemas. An MCP server is a user interface designed for a language model, and interfaces can be measured.</p> <p>So I built one server twice, attacked …
dev.to — MCP tag
TIER_1Español(ES)·Tu codigo cotidiano·
<p>¿Y si pudieras convertir una carpeta de documentos Markdown en herramientas que otras aplicaciones puedan descubrir e invocar mediante un protocolo estándar?</p> <p>Eso es precisamente lo que construiremos utilizando <strong>Python y Model Context Protocol (MCP)</strong>.</p> …
<p>I built my first MCP server last week and it was way simpler than I expected. Here is exactly how, no fluff.</p> <h2> Prerequisites </h2> <ul> <li>Node.js 20+</li> <li>10 minutes</li> </ul> <h2> Step 1: Scaffold </h2> <div class="highlight js-code-highlight"> <pre class="highl…
