{"slug": "mcp-servers-are-spreading-treat-them-like-apis", "title": "\"🔌 MCP Servers Are Spreading. Treat Them Like APIs\"", "summary": "A developer argues that Model Context Protocol (MCP) servers should be governed like third-party APIs, warning that community servers capable of reading files, making HTTP calls and running shell commands introduce supply-chain and credential-exposure risk. The recommended approach is to pin servers to a commit or release tag, restrict exposed tools through an allowlist wrapped with audit logging, and keep high-stakes actions such as money movement, production deploys and secret rotation in first-party adapters until a server meets the same review bar as internal services.", "body_md": "MCP crossed from “interesting RFC” into “paste this server into your agent.”\n\nGitHub READMEs, Discord drops, and one-click installs now ship tools that can read files, hit HTTP, and sometimes run shell. That is power. It is also the same surface that ate API keys in every other plugin ecosystem.\n\nA Model Context Protocol server exposes tools and resources to a host (Claude Code, IDE agents, custom runtimes). The host decides which servers attach. The model decides which tools to call. Your job is everything between those two sentences: allowlists, auth, and blast radius.\n\nCommunity servers move fast. Pin a commit or a release tag. “Latest” is how supply-chain surprises arrive.\n\n`run_shell`, leave it off until you have a reason.\n\n``` js\n// sketch: only expose a subset of tools from an MCP server\nconst allow = new Set([\"search_docs\", \"get_issue\"]);\n\nfor (const tool of server.listTools()) {\n  if (!allow.has(tool.name)) continue;\n  host.registerTool(wrapWithAudit(tool));\n}\n```\n\n|  | MCP server | In-repo tool adapter | \n|---|---|---|\n| Speed to try | Fast | Slower | \n| Versioning | External | Yours | \n| Review | Often thin | PR-reviewed | \n| Fit when | Shared protocol across hosts | Critical side effects | \n\nUse MCP to explore and to standardize. Keep money movement, production deploys, and secret rotation in first-party adapters until the server has the same review bar as your services.\n\nBlocking community servers slows experimentation. Opening them without a sandbox is how you buy someone else’s bug. The middle path is a staging host with fake credentials and a recorded allowlist, then promote servers the same way you promote libraries.\n\nWhich MCP servers in your stack could delete data today if the model asked nicely?", "url": "https://wpnews.pro/news/mcp-servers-are-spreading-treat-them-like-apis", "canonical_source": "https://dev.to/journal_ai/-mcp-servers-are-spreading-treat-them-like-apis-mp", "published_at": "2026-10-29 18:41:05+00:00", "updated_at": "2026-10-29 18:48:56.009789+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-tools", "ai-safety", "developer-tools"], "entities": ["Model Context Protocol", "Claude Code", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/mcp-servers-are-spreading-treat-them-like-apis", "markdown": "https://wpnews.pro/news/mcp-servers-are-spreading-treat-them-like-apis.md", "text": "https://wpnews.pro/news/mcp-servers-are-spreading-treat-them-like-apis.txt", "jsonld": "https://wpnews.pro/news/mcp-servers-are-spreading-treat-them-like-apis.jsonld"}}