13:04
2026-06-18
dev.to
developer-tools
We scanned 12 popular MCP servers. The most interesting finding was our own false positives.
A developer built mcp-customs, a free offline CLI that checks MCP servers for security risks before installation. Scanning 12 popular MCP servers revealed that 11 of 12 had zero permission or scope de…