yjcho9317

3 ms·

1. 1.▲
   Show HN: MCP-fence – MCP firewall I built and tried to break (6 audit rounds)(npmjs.com)

   1 points by yjcho9317 6mo ago|1 comments
2. 2.▲
   by yjcho9317 6mo ago

   Interesting timing — I work on a mobile security SDK for Korean banking apps (200+ installs), and Accessibility abuse is basically our #1 headache. Stuff like FakeCall does exactly this — reads the UI tree, taps, types, all of it. From the
3. 3.▲
   by yjcho9317 6mo ago

   Yeah, I hit this. I run an MCP server that talks to a corporate messaging API — if it stays connected the whole session, any hallucinated tool call can fire off messages to an entire org while the agent is doing something unrelated. There&#
4. 4.▲
   by yjcho9317 6mo ago

   I built and shipped an MCP server (NAVER WORKS integration) so I've been on both sides of this. My server talks to a corporate messaging API — one bad tool call could blast messages to an entire org. I ended up writing input validation