MCP has no auth, no rate limits, no output caps — by design. Anthropic confirmed when they closed a vuln report.
Was building something with MCP tools and ran into this when reading about the Bitwarden attack. Malicious npm package proxied MCP requests and exfiltrated data — researchers reported the design flaw, Anthropic responded
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/webdev
Originally published by r/webdev. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.