Posted by thoughtpeddler 4/10/2025
It's also "Model Context Protocol", a protocol for LLMs to interact with third-party services.
Just wrap it in an SSH tunnel or a HTTPS websocket
> MCP servers can run (malicious code) locally.
Just run it in a Docker container
> Just wrap it in an SSH tunnel or a HTTPS websocket
I assume this is sarcasm, but if not (and for people that take it at face value), it fundamentally misunderstands what auth is used for.
You should probably read the original article in the footnotes of OP's article: https://equixly.com/blog/2025/03/29/mcp-server-new-security-...
While a container will surely protect you from those, it will also prevent you using the features implemented by those MCP Servers.
Phase one is adopting it (you are here). Phase two is somehow turning it into a Web standard deeply integrated with Chrome which they have no real competition from and takes billions of dollars just to stay apace with.
Not sure about Extinguish to be honest, Google just wants the monopoly and they already have it.