A model summarising an incident for us once pulled the contents of a Kubernetes Secret into a transcript. Nothing was compromised. No attacker involved. The MCP server had been given a read-only role, somebody had written that role the way you write roles for humans — broad read across the API, because reading is harmlessContinue reading “MCP Servers in the Enterprise: Identity, Policy and Blast Radius”
