Unverified50% confidenceDecision RuleExact time
Before installing an MCP server, one should verify the publisher's true identity, repository origin, and community reputation, and should not trust it solely based on name similarity.
1
Sources
50%
Confidence
Long-term
Relevance
10/10/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe MCP specification requires that tool annotations be treated as untrusted unless the server is trusted.77% similarUnverifiedCoverCraft, registered as an independent MCP server, has been listed in M8ven's MCP Trust Index and marked as a Verified Publisher73% similarUnverifiedThe MCP authorization specification emphasizes token audience validation, requiring MCP servers to verify that a token was indeed issued to themselves in order to prevent confused deputy attacks.72% similarUnverifiedMCP connectors largely exist as community-driven open-source projects, lacking unified security review and signed distribution mechanisms.72% similarUnverifiedWhen using the Fabric Core MCP Server, it is recommended to use least-privilege identities, keep client approval settings enabled, review tool calls before changes are executed, and not point agents holding tenant administrator accounts directly at production environments.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/994104API
curl https://kongchang.com/api/v1/knowledge/claims/994104MCP
get_claim(id=994104)