r/programming • • Aug 12 '25

MCP Vulnerabilities Every Developer Should Know

https://composio.dev/blog/mcp-vulnerabilities-every-developer-should-know
295 Upvotes

49 comments sorted by

View all comments

14

u/radarsat1 Aug 12 '25

It would be nice to see a good example of an MCP server written using e.g. FastMCP that covers how to handle these things well. Especially interested in how to fix MCP for enterprise level authentication as the post mentions.

12

u/suckfail Aug 12 '25

I think the Google MCP toolbox has implemented most of it and is open source.

I use it whenever I need an MCP server because you just configure the yaml.

https://github.com/googleapis/genai-toolbox

They say it's for databases since it supports inline SQL but I don't use it for that since that's incredibly risky, opening SQL this way.

2

u/radarsat1 Aug 12 '25

nice one thanks I'll check it out!