nyk
@nykdotdev
exploring intelligence, markets & the systems shaping both · prev founded @builderzdotdev · @rpcedge · member @SuperteamDE |
参加 September 2017
900 フォロー中 10K ファン
same gap one layer in: an mcp endpoint that accepts any bearer token, even a single character, has no auth.send your gateway a junk token and see what comes back.
reaching the port is not permission to call the tools.
any mcp server on sse or http needs auth in front of the socket.
tools/list and tool returns stay data until something checks them.
