Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...
One MCP server for the filesystem, one for Git, one for Jira, one for the database, one for Icinga, one for the browser, one for email… and before long you find yourself with ten or fifteen servers ...