{
  "id": 1030692,
  "title": "You added an MCP server to your AI assistant. Did you check what it can touch?",
  "url": "https://urgent.news/2026/08/15/you-added-an-mcp-server-to-your-ai-assistant-did-you-check-what-it",
  "topic": "world",
  "section": "World",
  "published": "2026-08-15T12:10:29.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sstart/you-added-an-mcp-server-to-your-ai-assistant-did-you-check-what-it-can-touch-2399"
  },
  "original_language": "en",
  "account": "Adding an MCP server to your AI assistant brings new capabilities like reading your filesystem, querying databases, calling APIs, and executing shell commands. However, with these powerful abilities come significant risks. When you install a normal browser extension, you typically receive a permission prompt, but adding an MCP server to your AI coding assistant often goes unnoticed. Most users do not read the server's source code to understand what access it exposes. This is particularly concerning when the assistant has generated or recommended the server itself. There are three common patterns that lead to security breaches: a server with read access gaining write permissions, a server interacting with an external API embedding credentials directly, and a server meant for local development being repurposed for production use without re-evaluating its commands. These issues arise from the rush to ship code without thorough scoping of permissions. Before trusting an MCP server, it is crucial to examine what the server can actually do. Examine the tool definitions it exposes, not just its stated purpose. Check where credentials are stored and ensure they are not hardcoded. Grant only the minimum permissions required for the server's intended task. If you did not write the server, treat it with the same scrutiny you would give a new software dependency. Tools like RepoFortify can automatically scan repositories for overlooked access permissions. While the convenience of an AI assistant that can perform tasks is undeniable, it is equally important to recognize that granting broad capabilities is a significant permission grant, whether intentional or not.",
  "summary": "You added an MCP server to your AI assistant. Did you check what it can touch? MCP servers give your AI assistant new abilities: read your filesystem, query your database, call an API, run a shell command. That is the whole point of them. It is also the whole point of the risk. The permission question nobody asks When you install a normal browser extension, you at least see a permission prompt.…",
  "key_points": [
    "Adding an MCP server grants powerful abilities like filesystem access and API calls.",
    "Users often overlook server permissions, not reading source code or understanding exposed access.",
    "Thoroughly examine server capabilities, credentials storage, and permission scope before use."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}