Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Directory of MCP Servers

github.com

Post reply on HN
Print view View original

61–68 of 68 posts

Re: Directory of MCP Servers

#61

Post by lyu07282 »

owebmaster wrote: post #56
lyu07282 wrote: post #48

Earlier quoted context omitted.

That flaw isn't introduced by the MCP server necessarily it can already be present in the API data it returns, you will never be able to protect yourself against someone injecting a malicious prompt that calls your code eval tool to open up a reverse shell on your MacBook Pro.

that's not the case, MCP has a feature, samplings, that allow MCP servers to run prompts using the client model.

Oh boy, you know at least the infosec people are going to get a good laugh from this clown show

Re: Directory of MCP Servers

#62

Post by rvz »

maxwellg wrote: post #31

I can't wait for first-party remote MCP servers to become more common. Right now we're taking a strange detour of everyone trying to proxy everyone else's APIs and do manual API Key juggling because platforms aren't running their own MCP servers and clients don't support the latest OAuth changes. In a year from now, Github will run a single public Github MCP server that you will connect to via OAuth - you won't need…

> I can't wait for first-party remote MCP servers to become more common

> In a year from now, Github will run a single public Github MCP server that you will connect to via OAuth - you won't need to install it locally or faff around with tokens or environment variables at all.

That sounds horrific. GitHub is known for their unreliability and centralizing everything to GitHub which isn't a good idea.

Combining two bad standards (MCP and OAuth) doesn't make remote MCP servers secure either.

Re: Directory of MCP Servers

#65

Post by cyberge99 »

niel wrote: post #53
maxwellg wrote: post #31

I can't wait for first-party remote MCP servers to become more common. Right now we're taking a strange detour of everyone trying to proxy everyone else's APIs and do manual API Key juggling because platforms aren't running their own MCP servers and clients don't support the latest OAuth changes. In a year from now, Github will run a single public Github MCP server that you will connect to via OAuth - you won't need…

> In a year from now You can get a taste of this already. While they still call it a prototype/beta, Sentry's MCP server [0] is a model for others to follow when it comes to convenience and usefulness. Remote-first with OAuth. The biggest hurdle to using it as-is at the moment, is that most clients don't natively support OAuth yet, so often you'll rely on a local proxy server, like mcp-remote [1], to handle auth. Cli…

The step after that is paid access to any apis.

Re: Directory of MCP Servers

#66

Post by cyberge99 »

reustle wrote: post #30
ukuina wrote: post #27

Earlier quoted context omitted.

But the standard servers should be hosted by the service provider, like mcp.slack.com as a counterpart to api.slack.com Why should I be self-hosting ANY local MCP server for accessing an external service?

That is being done as a stop gap until official servers are released. Ideally you are writing a server for your own product/service, or custom local work. i.e. I wrote a server for water.gov to pull the river height prediction nearby for the next 24hr. This helps the campground welcome message writing tool craft a better welcome message. Sure that could be a plain tool call, but why not make it portable into any AI s…

Can you share this?

Re: Directory of MCP Servers

#68

Post by kordlessagain »

ilteris wrote: post #52
kordlessagain wrote: post #14

Earlier quoted context omitted.

I have an agent that creates new tools here: https://github.com/kordless/gnosis-evolve . I use it with Claude Desktop for a lot of different things, including browsing or searching for content, with the various crawlers that are out now. There's a crawl4ai tool that is pretty useful.

Couldn't you do this without mcp? Could you help me understand the value?

Yes, absolutely. Can be done without it and fairly easy to even make it call remotely. The value is a framework that a client can use to make calls, however. And if I want to use Claude Desktop, much easier to use MCP to deal with the interconnect. Consider VSCode integration there is much there for me to learn. Here it's easy to use the MCP stuff but it certainly isn't necessary in a server deployment, for example. Although you may want to write a MCP server for your endpoints, if you make money off that stuff.
Post reply on HN