3 ms·
This can be trivially prevented by running the MCP server in a sandboxed environment. Recent products in this space are microsandbox (using firecracker) and too
by meander_water 1y ago
This can be trivially prevented by running the MCP server in a sandboxed environment. Recent products in this space are microsandbox (using firecracker) and toolhive (using docker)
- K0balt 1y agoI don’t think that’s necessarily true, unless you wrote the MCP server. Supply chain attacks would still make this an attack surface.
- meander_water 1y agoWhat I was trying to say was that in the attack scenario presented (exfiltrating sensitive data from a host), hosting the MCP server in an untrusted execution environment ensures that it doesn't have access to host files.