So I was asking about MCPs last night, and 
@theverge has my back.
@SempfBill @theverge One really interesting thing from this article, is Anthropic’s statement that they really don’t do security or authentication, so it’s good that MCP will now maybe get help in those areas.
So… same mistake as always! Security bolted on last.
If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/scottwilson/statuses/115699327714794661 on your instance and quote it. (Note that quoting is not supported in Mastodon.)