Skip to content
T threat.cafe

Tag

#vetting

1 post

  1. · Margot Reyes · Original research and datasets · on threat.cafe

    The official MCP Registry has no security fields: what a registry listing does and doesn't tell you

    An MCP Registry listing proves a publisher controls a namespace and, for packages, the package. It does not prove review, safe code, or control of a remote URL. The schema has no security field at all.