I Built an MCP Server for Domain Investigation - 5 Security Gotchas I Hit
The CVE counter hit 30 before Valentine's Day The first CVE for an MCP server dropped on January 3. By February 14, the count was past thirty. I found that out while I was still debugging why my new MCP server had handed an AI agent a raw WHOIS record with a typo-squatted registrar name, and the agent treated it like gospel. That server wrapped my Portfolio Investigate API as an MCP tool. One…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
