News for hackers. Stuff that matters.
Re:The Agent2Agent Protocol (A2A) by evacchi on Wednesday April 09, 2025 @12:17PM (#43633789)
we also recently published our approach on MCP security for mcp.run. Our "servlets" run in a sandboxed environment; this should mitigate a lot of the concerns that have been recently raised.

https://docs.mcp.run/blog/2025/04/07/mcp-run-security

Re:The Agent2Agent Protocol (A2A) by huslage on Wednesday April 09, 2025 @01:57PM (#43635166)
The main concern I have is that there's not a well defined security context in any agentic system. They are assumed to be "good" but that's not good enough.
Re:The Agent2Agent Protocol (A2A) by puliczek on Thursday April 10, 2025 @02:18AM (#43641177)
Good article, Edoardo! The ideas about securing MCP frameworks with servlets are really interesting. Just added your article to https://github.com/Puliczek/awesome-mcp-security