Files

T

retoor 251c3dc2ba research: mcp-client-support subject (106 sources, 3 conclusions)

- wire spec: lifecycle, stdio + Streamable HTTP transports, tools,
  utilities, legacy SSE, versioning, changelog (14 Tier 1)
- client ecosystem: Claude Code/VS Code/Cursor/Codex configs,
  mcp-remote, Smithery, registries, Glama (12 Tier 1)
- security/ops: authorization draft, trust model, poisoning,
  rug pulls, production hardening (12 Tier 1) + 68 Tier 2 cards
- conclusions: minimal stdlib client on 2025-11-25, normalizer +
  resolver agent for pasted configs/GitHub URLs, untrusted-until-
  consent trust model; nothing built yet
- audit PASS (14 subjects, 797 sources, 32 conclusions)

2026-10-18 19:23:02 +02:00

924 B

Raw Blame History

mcp-prompt-injection-lab

Metadata

Field	Value
Institute	Molodetz Institute - Research & Retrieval Division
Subject	mcp-client-support
Document type	Source Citation Card
Tier	2
Source title	mcp-prompt-injection-lab
Source URL	https://github.com/aka005/mcp-prompt-injection-lab
Source type	repository
Date researched	2026-10-18
Researched by	tai (agent), model: Claude Sonnet 5, on behalf of retoor
Research method	Search aggregator result listing (not independently opened or quoted)
Confidence	Not independently verified
Status	Active

Why it's here

Item 3 of the pack's 35 unopened listings. A runnable malicious-server lab (weather/file-steal, hidden note commands): potentially useful as a test harness for client defenses.

Changelog

Date	Change
2026-10-18	Logged as consulted-but-not-analyzed.

924 B Raw Blame History

mcp-prompt-injection-lab

Metadata

Why it's here

Changelog

924 B

Raw Blame History