Your MCP Server Is a Second API: How to Add One to Django Without Skipping Row-Level Checks (Part 3)

Short version An MCP server is a second API to your data. If its tools run their own queries, they skip every rule your first API enforces. On November 3, a CVE was published for exactly that shape i