Files

T

retoor 251c3dc2ba research: mcp-client-support subject (106 sources, 3 conclusions)

- wire spec: lifecycle, stdio + Streamable HTTP transports, tools,
  utilities, legacy SSE, versioning, changelog (14 Tier 1)
- client ecosystem: Claude Code/VS Code/Cursor/Codex configs,
  mcp-remote, Smithery, registries, Glama (12 Tier 1)
- security/ops: authorization draft, trust model, poisoning,
  rug pulls, production hardening (12 Tier 1) + 68 Tier 2 cards
- conclusions: minimal stdlib client on 2025-11-25, normalizer +
  resolver agent for pasted configs/GitHub URLs, untrusted-until-
  consent trust model; nothing built yet
- audit PASS (14 subjects, 797 sources, 32 conclusions)

2026-10-18 19:23:02 +02:00

942 B

Raw Blame History

R6-mcp-agent-security

Metadata

Field	Value
Institute	Molodetz Institute - Research & Retrieval Division
Subject	mcp-client-support
Document type	Source Citation Card
Tier	2
Source title	R6-mcp-agent-security
Source URL	https://github.com/piotrkruszynski/hackyeah26/blob/HEAD/research/R6-mcp-agent-security.md
Source type	repository
Date researched	2026-10-18
Researched by	tai (agent), model: Claude Sonnet 5, on behalf of retoor
Research method	Search aggregator result listing (not independently opened or quoted)
Confidence	Not independently verified
Status	Active

Why it's here

Item 11 of the pack's 35 unopened listings. A research note with MUST/MUST-NOT token rules and lethal-trifecta session taint: candidate for token-handling rules.

Changelog

Date	Change
2026-10-18	Logged as consulted-but-not-analyzed.

942 B Raw Blame History

R6-mcp-agent-security

Metadata

Why it's here

Changelog

942 B

Raw Blame History