Files
tai/research/mcp-client-support/github-agentic-ai-malicious-servers.md
T
retoor 251c3dc2ba research: mcp-client-support subject (106 sources, 3 conclusions)
- wire spec: lifecycle, stdio + Streamable HTTP transports, tools,
  utilities, legacy SSE, versioning, changelog (14 Tier 1)
- client ecosystem: Claude Code/VS Code/Cursor/Codex configs,
  mcp-remote, Smithery, registries, Glama (12 Tier 1)
- security/ops: authorization draft, trust model, poisoning,
  rug pulls, production hardening (12 Tier 1) + 68 Tier 2 cards
- conclusions: minimal stdlib client on 2025-11-25, normalizer +
  resolver agent for pasted configs/GitHub URLs, untrusted-until-
  consent trust model; nothing built yet
- audit PASS (14 subjects, 797 sources, 32 conclusions)
2026-10-18 19:23:02 +02:00

979 B

Malicious MCP Servers (agentic-ai notes)

Metadata

Field Value
Institute Molodetz Institute - Research & Retrieval Division
Subject mcp-client-support
Document type Source Citation Card
Tier 2
Source title Malicious MCP Servers (agentic-ai notes)
Source URL https://github.com/kashifsabri/agentic-ai/blob/HEAD/agentic%20ai/Part%2009%20-%20Security/67%20-%20Malicious%20MCP%20Servers.md
Source type repository
Date researched 2026-10-18
Researched by tai (agent), model: Claude Sonnet 5, on behalf of retoor
Research method Search aggregator result listing (not independently opened or quoted)
Confidence Not independently verified
Status Active

Why it's here

Item 18 of the pack's 35 unopened listings. Study notes explaining rug pulls plus shadowing: background reading candidate.

Changelog

Date Change
2026-10-18 Logged as consulted-but-not-analyzed.