News for hackers. Stuff that matters.

imtaimoorkhan

Taimoor here, one of two founders. We've run 79 of the most-used MCP servers so far, only 31 came back fit. The one that got me: Heroku's own official MCP server comes back not fit, high severity, it can run arbitrary commands built from tool args. Record's public: usethrone.dev/server/heroku-mcp-server Honest about where it's at: right now it's protocol replay + static rules, the deeper syscall-level tracing is still being built. Free, no signup, throw any server at it.

Curious what'd make you actually put this in CI before your agents run something?

The best part of this is the data ownership side. Training history is exactly the kind of personal data I would rather keep in my own database than inside another fitness SaaS. Also nice that the AI layer is not just raw chat.