Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
MCP Security Deep Dives Series' Articles
Back to Kiell Tampubolon's Series
I Connected 11 MCP Servers. 3 of Them Actually Did Anything.
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
May 4
I Connected 11 MCP Servers. 3 of Them Actually Did Anything.
#
discuss
#
mcp
#
ai
#
productivity
Comments
2
comments
4 min read
Finishing a Read-Only MCP Server: From 6 Tools to 9
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Jun 7
Finishing a Read-Only MCP Server: From 6 Tools to 9
#
devchallenge
#
githubchallenge
#
ai
#
opensource
5
reactions
Comments
2
comments
3 min read
The MCP attack your code review cannot see
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Jul 4
The MCP attack your code review cannot see
#
security
#
mcp
#
ai
#
python
Comments
6
comments
4 min read
My MCP Security Scanner Missed 2026's Worst MCP RCE: Here Is the One-Rule Fix
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 5
My MCP Security Scanner Missed 2026's Worst MCP RCE: Here Is the One-Rule Fix
#
mcp
#
security
#
python
#
opensource
1
reaction
Comments
4
comments
5 min read
MCP 2026-07-28 Went Stateless: A Planted Prompt Is a Credential
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 7
MCP 2026-07-28 Went Stateless: A Planted Prompt Is a Credential
#
discuss
#
python
#
mcp
#
security
Comments
2
comments
8 min read
What actually changes when an MCP server leaves your laptop
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 11
What actually changes when an MCP server leaves your laptop
#
mcp
#
ai
#
node
#
security
Comments
1
comment
3 min read
A happy-path MCP demo proves almost nothing about tenant isolation
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 11
A happy-path MCP demo proves almost nothing about tenant isolation
#
mcp
#
security
#
ai
#
python
Comments
9
comments
3 min read
Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 12
Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives
#
security
#
python
#
testing
#
mcp
Comments
1
comment
2 min read
My Scanner Passed Until I Built a Harness That Lied to It on Purpose
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 14
My Scanner Passed Until I Built a Harness That Lied to It on Purpose
#
security
#
python
#
devtools
#
testing
3
reactions
Comments
10
comments
3 min read
The NSA published 17 pages on MCP security. Here it is as a checklist you can run today
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 14
The NSA published 17 pages on MCP security. Here it is as a checklist you can run today
#
security
#
aiagents
#
mcp
#
devtools
Comments
Add Comment
3 min read
200,000 exposed MCP servers later, the boring checks still win
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 14
200,000 exposed MCP servers later, the boring checks still win
#
security
#
aiagents
#
mcp
#
devops
Comments
Add Comment
2 min read
5 Kesalahan Keamanan MCP yang Jamak Dilakukan Bisnis Kecil (dan Cara Memperbaikinya Hari Ini)
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 14
5 Kesalahan Keamanan MCP yang Jamak Dilakukan Bisnis Kecil (dan Cara Memperbaikinya Hari Ini)
#
security
#
mcp
#
ai
#
indonesia
Comments
Add Comment
3 min read
What Is MCP Security? Common Attacks and How to Scan Your MCP Servers
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 15
What Is MCP Security? Common Attacks and How to Scan Your MCP Servers
#
mcp
#
aisecurity
#
cybersecurity
#
agents
Comments
7
comments
5 min read
How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 16
How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions
#
security
#
ai
#
mcp
#
python
Comments
Add Comment
5 min read
A fake MCP server spent three months earning trust. The tells were there
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Sep 18
A fake MCP server spent three months earning trust. The tells were there
#
security
#
aiagents
#
mcp
#
supplychain
1
reaction
Comments
14
comments
3 min read
MCP Costs 72% of Your Context: The Fix Pi Shipped
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
MCP Costs 72% of Your Context: The Fix Pi Shipped
#
discuss
#
python
#
mcp
#
aiagents
Comments
Add Comment
6 min read
I Audited the MCP SDK OAuth Fix: 3 Checks Upgrading Misses
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
I Audited the MCP SDK OAuth Fix: 3 Checks Upgrading Misses
#
discuss
#
python
#
mcp
#
security
Comments
Add Comment
6 min read
Read-Only Postgres MCP Servers Fail With 1 SQL Keyword
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
Read-Only Postgres MCP Servers Fail With 1 SQL Keyword
#
discuss
#
python
#
mcp
#
security
Comments
Add Comment
6 min read
I Traced 29 CVEs in One MCP Server to 4 Root Causes
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
I Traced 29 CVEs in One MCP Server to 4 Root Causes
#
discuss
#
python
#
mcp
#
security
Comments
Add Comment
10 min read
MCP Servers Had a Rough 48 Hours: 4 Unauthenticated CVEs
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
MCP Servers Had a Rough 48 Hours: 4 Unauthenticated CVEs
#
discuss
#
python
#
mcp
#
security
Comments
Add Comment
9 min read
Threat Modeling the Model Context Protocol: Securing Agentic Tools with mcpscan
Kiell Tampubolon
Kiell Tampubolon
Kiell Tampubolon
Follow
Oct 4
Threat Modeling the Model Context Protocol: Securing Agentic Tools with mcpscan
#
security
#
ai
#
mcp
#
python
Comments
Add Comment
5 min read
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account