Unverified50% confidenceDecision RuleExact time
Security recommendations for remote MCP Servers include: first understand the server implementation, use only an allowed tools whitelist, add approval for any write operations, and treat all tool returns as unstructured input to stay vigilant against prompt injection.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedMCP Server 可以暴露工具（Tools）、资源（Resources）和提示词模板（Prompts）三类能力79% similarUnverifiedWhen enterprises plan MCP architecture, it is recommended to whitelist the tools exposed by each server, monitor tool-invocation behavior in real time, and introduce human approval or secondary confirmation mechanisms for high-risk operations.78% similarUnverifiedThe tool has a built-in function for pinning MCP tool definitions, and issues a warning when a connected MCP server subsequently modifies its tool definitions.78% similarUnverifiedThe MCP specification requires that tool annotations be treated as untrusted unless the server is trusted.78% similarUnverifiedBy connecting to official MCP servers provided by service vendors, agents obtain validated, structurally defined tool interfaces, reducing the probability of errors from guessed calls.77% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1007870API
curl https://kongchang.com/api/v1/knowledge/claims/1007870MCP
get_claim(id=1007870)