MCP security: how a malicious MCP server can steal your secrets, and how to lock it down

Adding an MCP server takes one line. Someone shares a repo, the README says npx -y some-mcp-server, you paste it into your config, and a few seconds later your AI agent has new tools. It feels like in