> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
OX Security mapped 15,465 public MCP servers: 15.6% hosted outside the US, 2.3% of domains already dead. The protocol is fine. The trust isn't.
AI agents hold credentials and act on the world. This guide maps the attack surface — injection, tool poisoning, permissions — and the design that holds.
Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.
Google's Sovereign Agent Mesh is a zero-config, zero-trust P2P overlay that lets AI agents share tools across networks without exposing private endpoints.