Unverified50% confidenceFactExact time
A malicious MCP Server may reach the user's files and keys.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen an MCP server cannot reliably identify the client making a request, any entity that can reach that service endpoint may obtain data or invoke tools under the guise of a legitimate client.80% similarUnverifiedMCP Servers usually run as the user and obtain the same credentials as the user (local file system access, API keys, OAuth tokens), so a malicious or vulnerable Server could in theory read anything within its authorized scope.78% similarUnverified安全研究人员发现一个恶意MCP服务器伪装成正规邮件转发服务Postmark MCP，实际会在每封邮件密送一份给攻击者78% similarVerifiedThe Keydris solution provides a "credential-free" MCP server template that allows agents to complete tool calls without touching sensitive keys.76% similarUnverifiedThe worst pattern is when a local MCP server directly forwards end-user sessions and impersonates users to access target systems, which results in loss of traceability.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085526API
curl https://kongchang.com/api/v1/knowledge/claims/1085526MCP
get_claim(id=1085526)