Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

Show HN: I ran 70 MCP servers in a sandbox and logged what they do

A developer sandbox-tested 70 MCP (Model Context Protocol) servers to log their runtime behavior, aiming to audit what actions these servers perform when executed.

Background

- MCP (Model Context Protocol) is an open protocol developed by Anthropic that lets AI assistants (like Claude) connect to external tools, APIs, and data sources through "MCP servers." It was released in late 2024 and has quickly become a standard way to extend AI capabilities. - This project audited 70 MCP servers by running them in a sandbox (an isolated, safe environment) and logging their actual behavior — what they access, what data they send/receive, and whether they do anything unexpected. - The core concern: MCP servers have access to your files, credentials, and other sensitive data. Because they run locally and connect to an AI assistant, a malicious or poorly written server could exfiltrate data, modify files, or perform actions the user didn't intend. - This is relevant to the current debate around AI safety and supply-chain security — similar to concerns about npm or PyPI packages, but specifically for the AI tool ecosystem.

Related stories