# Posts by tag 'mcp' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/mcp

[![](/_astro/managing-ai-agents-and-skills-with-apm.Cv8OZfsE_27cY3B.png)

May 2, 2026 14 min read

### Managing AI Agents and Skills with APM

Microsoft's Agent Package Manager brings package.json-style manifests and lockfiles to Claude Skills, MCP servers, and other agent artifacts, with hands-on recipes and sharp edges we hit in practice (collections path, meta-packages, security).](/blog/managing-ai-agents-and-skills-with-apm)

*   [ai agents](/tag/ai-agents)
*   [skills](/tag/skills)
*   [mcp](/tag/mcp)
*   [supply chain](/tag/supply-chain)

 [![](/_astro/restful-http-mental-model-to-understand-mcp.BJyOYSSi_Z14mXpN.jpg)

Oct 12, 2025 4 min read

### A RESTful HTTP Mental Model to Understand MCP

For those familiar with RESTful HTTP architecture, would it make sense to describe the Model Context Protocol (MCP) in a similar way?](/blog/a-restful-http-mental-model-to-understand-mcp)

*   [ai](/tag/ai)
*   [mcp](/tag/mcp)
*   [software architecture](/tag/software-architecture)

 [![](/_astro/mcp-server-security-evaluation-framework-logo.CZi2e61B_FchLG.png)

Oct 7, 2025 4 min read

### A Proposed Evaluation Framework for MCP Server Security

How do you securely integrate a new MCP Server into Cursor or other agentic workflows? what security practices do you consider to evaluate the risks?](/blog/mcp-server-security-evaluation-framework)

*   [ai](/tag/ai)
*   [mcp](/tag/mcp)
*   [security](/tag/security)

 [![](/_astro/mcp-security-threats-and-risks.akMmTKlb_24MVFf.png)

Oct 5, 2025 6 min read

### Evaluation Framework for MCP Security Threats and Risks

How to evaluate and categorize security threats and risks associated with Model Code Protocol (MCP) in light of recent security incidents.](/blog/evaluation-framework-for-mcp-security-threats-and-risks)

*   [ai](/tag/ai)
*   [MCP](/tag/mcp)
*   [security](/tag/security)

 [![](/_astro/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis.DDqXsmRM_Z1BA0KJ.jpg)

Oct 3, 2025 4 min read

### The Cursor Agentic Jira MCP Attack Explained with Toxic Flow Analysis

A breakdown of the Cursor + Jira MCP 0-Click attack, how it was exploited, and why developers are at the center of it all. Understanding MCPs, Toxic Flows, and the implications for AI-assisted coding environments.](/blog/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis)

*   [ai](/tag/ai)
*   [MCP](/tag/mcp)
*   [security](/tag/security)

 [![](/_astro/MCP_logo_bleeding_colored_red.KTYPhij6_ZFXwLm.png)

Sep 24, 2025 3 min read

### The Uprising of Model Context Protocol (MCP) Security Research

The Model Context Protocol (MCP) is gaining traction in the AI community, and with its rise comes a wave of security research. This article explores the emerging security landscape surrounding MCP, highlighting key vulnerabilities and the importance of robust security measures in this evolving protocol.](/blog/the-uprising-of-model-context-protocol-mcp-security-research)

*   [ai](/tag/ai)
*   [mcp](/tag/mcp)
*   [security research](/tag/security-research)

 [![](/_astro/poetic-tales-vulnerable-mcp-servers.CNlJCEp6_Z2jCMBo.jpg)

Sep 11, 2025 3 min read

### Poetic Tales of Vulnerable MCP Servers: Command Injection in AI Coding Assistants

Model Content Protocol (MCP) servers can be a security nightmare if not handled properly. This post explores a real-world command injection vulnerability in AI coding assistants, illustrating the risks and implications for developers.](/blog/poetic-tales-vulnerable-mcp-servers-command-injection-ai-coding-assistants)

*   [mcp](/tag/mcp)
*   [securiyy](/tag/securiyy)
*   [command-injection](/tag/command-injection)

 [![](/_astro/ls-mcp-detects-env-var-risks.BejA_byN_2i4wK2.jpg)

Sep 9, 2025 3 min read

### Secure Your MCP Servers with Environment Variable Risk Assessment

Learn how to enhance the security of your MCP server configurations by using the latest \`ls-mcp\` tool to detect and categorize credential risks in environment variables.](/blog/secure-mcp-env-var-risk-assessment)

*   [mcp](/tag/mcp)
*   [security](/tag/security)
*   [environment variables](/tag/environment-variables)

 [![](/_astro/mcp-server-security-evaluation-framework.DZIWGiQo_7Enkv.jpg)

Sep 1, 2025 4 min read

### A Proposed MCP Server Security Evaluation Framework

With great MCP power comes great MCP responsibility and you should be prepared to evaluate the security of your MCP server implementation and MCP adoption in your AI agents.](/blog/mcp-server-security-evaluation-framework)

*   [mcp](/tag/mcp)
*   [security](/tag/security)
*   [ai](/tag/ai)
*   [model context protocol](/tag/model-context-protocol)

 [![](/_astro/mcp-company-ngmi.BlINOHC9_1MJD5m.jpg)

Jul 23, 2025 6 min read

### If You're an MCP Company You're NGMI

Model Context Protocol (MCP) is a great protocol but if your company is built around it as the core product, you're not gonna make it. Here's why.](/blog/if-youre-an-mcp-company-youre-ngmi)

*   [devrel](/tag/devrel)
*   [ai](/tag/ai)
*   [mcp](/tag/mcp)