Claude 4 and GitHub MCP will leak your private GitHub repositories

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by recursivegirth on Monday May 26, 2025 @09:15PM (#44103087)

I think a lot of this has to do with the way MCP is being marketed.

I think the protocol itself should only be used in isolated environments with users that you trust with your data. There doesn't seem to be a "standardized" way to scope/authenticate users to these MCP servers, and that is the missing piece of this implementation puzzle.

I don't think Github MCP is at fault, I think we are just using/implementing the technology incorrectly as an industry as a whole. I still have to pass a bit of non-AI contextual information (IDs, JWT, etc.) to the custom MCP servers I build in order to make it function.

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by kiitos on Monday May 26, 2025 @09:20PM (#44103113)

The MCP protocol explicitly says that servers are expected to be run in a trusted environment. There have been some recent updates to the spec that loosen this requirement and add support for various auth schemes, but

[ Parent | on HN ]