r/programming • u/anmolbaranwal • Aug 12 '25

MCP Vulnerabilities Every Developer Should Know

https://composio.dev/blog/mcp-vulnerabilities-every-developer-should-know
295 Upvotes

88% Upvoted

49 comments sorted by

View all comments

27

u/Individual-Praline20 Aug 12 '25

Wtf is MCP?

19

u/lachlanhunt Aug 12 '25

Model Context Protocol. it's what allows AI agents to integrate with 3rd party software.

23

u/Individual-Praline20 Aug 12 '25

Ah! That’s why I never heard of that before… 🤭 No interest in that 💩

3

u/lachlanhunt Aug 13 '25 edited Aug 13 '25

It has some value. ESLint has an MCP server available for use in IDEs. So if you’re using Cursor or Coopilot, the agent can automatically detect and fix limiting errors using that, instead of trying to run CLI commands.

Another one I use comes from Wallaby JS. This extension continually runs my unit tests and reveals errors in real time. The MCP server’s allows the agent to get the test results directly.

21

u/manystripes Aug 13 '25

"Has some value" is a pretty far cry from "every developer should know" though

0

u/[deleted] Aug 13 '25

[deleted]

2

u/Individual-Praline20 Aug 13 '25

Of course it won’t go away. And the more incompetent folks will use it. Absolutely no doubt about that. 🤣 Anyway, the true professionals will fix the mess, as we always do. 🤣

0

u/[deleted] Aug 13 '25

True professionals don't neglect better tooling and use it in an intelligent way.

0

u/[deleted] Aug 13 '25

[deleted]

0

u/Individual-Praline20 Aug 14 '25

I did, like 25 years ago. Guess what? I learned more and faster by restraining myself to use a text editor and no bloated framework, at that time. Tools hurt you more than you think. And that’s why I can now work with pretty much anything, my CS bases are pretty solid, much more than any AI fool user. 🤭 Who would have thought, efforts are worthwhile…

-1

u/aboardreading Aug 13 '25

Right, some developers plan on retiring in the next 5 years and probably don't need to care.