74 posts tagged with "Model Context Protocol"
Content about the Model Context Protocol (MCP)
Your Cursor Sandbox Was Never the Thing Protecting You: Inside DuneSlide's Zero-Click RCE
Two CVSS 9.8 bugs in Cursor let a zero-click prompt injection escape the sandbox and reach full code execution. The real lesson isn't the sandbox bug — it's that the agent held the developer's standing machine permissions the whole time.
Dremio's MCP Server Doesn't Give AI Agents a Separate Policy — Here's the Kubernetes Version for a Self-Hosted PaaS's Deploy Tools
Dremio's lakehouse MCP server enforces the same row/column policies for an AI agent as for the human who's logged in — no separate agent policy to write or drift out of sync. Here's the exact Kubernetes primitives (TokenRequest, RBAC impersonation, audit logging) that build the same guarantee into a self-hosted PaaS's deploy and rollback tools.
Your MCP Traffic and Your Tenants' LLM Calls Just Got a Real Kubernetes Primitive
Kubernetes' new AI Gateway Working Group is formalizing token-based rate limiting, model-aware routing, and provider failover as Gateway API primitives. Here's what's already GA, what's still a proposal, and what it means for a platform routing both tenant and agent MCP traffic through one ingress layer.
MCP Apps Ships July 28: What a Rollout Dashboard Instead of Raw JSON Means for Deploy-From-Chat
MCP Apps lets a tool return a live, sandboxed dashboard instead of a JSON blob the model has to paraphrase. Here's exactly what that changes for a deploy-from-chat platform's rollout and rollback tools.
10,000 MCP Servers and Counting: Why Deploy-From-Chat's Real Bottleneck Is Discovery, Not Capability
The official MCP Registry now lists nearly 10,000 servers and MCP SDKs hit 97 million monthly downloads. Here's why that scale makes discovery and trust the real bottleneck for a deploy-from-chat MCP server — and what actually closes the gap.
Microsoft's Poisoned MCP Tool Descriptions: When an Approved Tool's Metadata Silently Changes to Leak Data, Not Its Code
Microsoft's June 2026 guidance shows an MCP tool's approved name and summary can stay frozen while its description silently changes to smuggle a hidden instruction. Here's the attack, three real precedents, and the checklist a deploy-from-chat MCP server needs to catch it.
12-Factor Agents Is the New 12-Factor App: A Deploy Tool's Field Guide
Dex Horthy's 12-Factor Agents mirrors Heroku's 2011 methodology almost line for line. Here's what each of the twelve factors concretely costs a platform building MCP-exposed deploy and rollback tools for AI agents.
Coolify Shipped an MCP Server. It Still Can't Deploy Your App.
Coolify's official MCP server is strictly read-only — the write-capable 'AI deploys your app' story everyone cites comes from a third-party wrapper holding your API token. Here's the concrete tool-by-tool split, why it matters, and where bex's own MCP server stands on the same line.
Coolify's MCP Server Ships Read-Only: Dokploy Beat It to AI-Driven Deploys, and Neither Can Answer 'Is My Fleet Healthy?'
Coolify's new MCP server can't deploy anything yet — it's 10 read-only tools. Dokploy shipped a write-capable one a month earlier. Here's what both still can't tell an AI agent about a multi-node fleet.