logoalt Hacker News

8cvor6j844qw_d6yesterday at 6:12 PM2 repliesview on HN

Always good to be paranoid.

Even MCPs are not safe. For example Notion injected ads [1] to its official MCP connector to advertise products mid-task.

[1]: https://old.reddit.com/r/ClaudeAI/comments/1w9dluw/notions_o...


Replies

seniorThrowawayyesterday at 6:47 PM

MCP is SOAP-XML without the contract or formal language, it's hilarious

show 1 reply
unrented7977yesterday at 7:02 PM

Whoever came up with that brilliant idea is probably paid twice what I am