MCP and Tool Protocol Security - openclawsecurity.net Forum https://openclawsecurity.net/community/openclaw-mcp-security/ openclawsecurity.net Discussion Board en-US Tue, 29 Sep 2026 13:25:33 +0000 wpForo 60 My results after implementing a 'tool request' confirmation step for users. https://openclawsecurity.net/community/openclaw-mcp-security/my-results-after-implementing-a-tool-request-confirmation-step-for-users/ Wed, 15 Jul 2026 09:01:10 +0000 MCP and Tool Protocol Security Olivia Park https://openclawsecurity.net/community/openclaw-mcp-security/my-results-after-implementing-a-tool-request-confirmation-step-for-users/ Breaking: Vendor X's MCP server had a default password. Sigh. https://openclawsecurity.net/community/openclaw-mcp-security/breaking-vendor-xs-mcp-server-had-a-default-password-sigh/ Tue, 14 Jul 2026 00:01:18 +0000 MCP and Tool Protocol Security Lea Kowalski https://openclawsecurity.net/community/openclaw-mcp-security/breaking-vendor-xs-mcp-server-had-a-default-password-sigh/ Anyone else worried about denial-of-service via MCP resource enumeration? https://openclawsecurity.net/community/openclaw-mcp-security/anyone-else-worried-about-denial-of-service-via-mcp-resource-enumeration/ Mon, 13 Jul 2026 22:01:11 +0000 MCP and Tool Protocol Security Leo Fischer https://openclawsecurity.net/community/openclaw-mcp-security/anyone-else-worried-about-denial-of-service-via-mcp-resource-enumeration/ Check out my proof-of-concept for an MCP server with mandatory TLS client certs. https://openclawsecurity.net/community/openclaw-mcp-security/check-out-my-proof-of-concept-for-an-mcp-server-with-mandatory-tls-client-certs/ Sun, 12 Jul 2026 12:00:10 +0000 MCP and Tool Protocol Security Jen D. https://openclawsecurity.net/community/openclaw-mcp-security/check-out-my-proof-of-concept-for-an-mcp-server-with-mandatory-tls-client-certs/ gRPC transport vs HTTP for MCP - which has better security tooling? https://openclawsecurity.net/community/openclaw-mcp-security/grpc-transport-vs-http-for-mcp-which-has-better-security-tooling/ Thu, 09 Jul 2026 20:01:00 +0000 MCP and Tool Protocol Security Tyrone Jackson https://openclawsecurity.net/community/openclaw-mcp-security/grpc-transport-vs-http-for-mcp-which-has-better-security-tooling/ Unpopular opinion: MCP without a formal threat model is just a toy. https://openclawsecurity.net/community/openclaw-mcp-security/unpopular-opinion-mcp-without-a-formal-threat-model-is-just-a-toy/ Thu, 09 Jul 2026 19:01:10 +0000 MCP and Tool Protocol Security Ray M. https://openclawsecurity.net/community/openclaw-mcp-security/unpopular-opinion-mcp-without-a-formal-threat-model-is-just-a-toy/ How can I ensure an MCP tool can't access other tools' resources? https://openclawsecurity.net/community/openclaw-mcp-security/how-can-i-ensure-an-mcp-tool-cant-access-other-tools-resources/ Wed, 08 Jul 2026 06:00:20 +0000 MCP and Tool Protocol Security Sarah Bhatia https://openclawsecurity.net/community/openclaw-mcp-security/how-can-i-ensure-an-mcp-tool-cant-access-other-tools-resources/ Unpopular opinion: The 'S' in MCP should stand for 'Sandbox'. https://openclawsecurity.net/community/openclaw-mcp-security/unpopular-opinion-the-s-in-mcp-should-stand-for-sandbox/ Mon, 06 Jul 2026 22:01:05 +0000 MCP and Tool Protocol Security Oliver Dunn https://openclawsecurity.net/community/openclaw-mcp-security/unpopular-opinion-the-s-in-mcp-should-stand-for-sandbox/ Hot take: MCP's error handling is too loose for security-critical apps. https://openclawsecurity.net/community/openclaw-mcp-security/hot-take-mcps-error-handling-is-too-loose-for-security-critical-apps/ Mon, 06 Jul 2026 18:00:22 +0000 MCP and Tool Protocol Security Priya Mehta https://openclawsecurity.net/community/openclaw-mcp-security/hot-take-mcps-error-handling-is-too-loose-for-security-critical-apps/ Where to find a list of known-vulnerable MCP server patterns? https://openclawsecurity.net/community/openclaw-mcp-security/where-to-find-a-list-of-known-vulnerable-mcp-server-patterns/ Sun, 05 Jul 2026 10:01:18 +0000 MCP and Tool Protocol Security Lars J. https://openclawsecurity.net/community/openclaw-mcp-security/where-to-find-a-list-of-known-vulnerable-mcp-server-patterns/