I found malicious code inside an MCP server

#mailtraptutorial #mcp #mcpserver #security In this Mailtrap tutorial, we'll explain how to vet an MCP server using a practical six-step MCP security checklist. You'll find out how to identify official publishers, review requested permissions, detect suspicious tool descriptions, assess recent CVEs, and understand the security tradeoffs between OAuth and API tokens. We'll also introduce you to mcp-vet, an open-source MCP tool poisoning detector, and share the post-installation security practices we use to keep MCP security vulnerabilities at bay. 00:00 - Intro 00:16 - Real-life MCP Server Security Incidents 01:36 - MCP Server Security Checklist 06:10 - Open-Source MCP Vetting Tool 06:57 - Post-Installation Security Practices Learn more about Mailtrap and start for free at 🔗 https://mailtrap.io/ggte Try out mcp-vet 🔗 https://github.com/VeljkoRailsware/mcp-vet Watch other 🎥  Mailtrap videos on AI: ▶ API vs MCP - Which one actually scales? https://youtu.be/j_kXTfpfshw ▶ AI tools for email and business playlist https://www.youtube.com/playlist?list=PL9DaE1u2br9IOgt2GbFNOYhpGinlTs_-9 Stay tuned! Subscribe to our YouTube channel and other pages on social media: YouTube: https://www.youtube.com/@mailtrap-official X: https://x.com/Mailtrap Facebook: https://www.facebook.com/Mailtrap TikTok: https://www.tiktok.com/@mailtrap.io Instagram: https://www.instagram.com/mailtrap.io LinkedIn: https://www.linkedin.com/company/mailtrap Disclaimer: We respect intellectual property rights. All the materials you see in this video, which belong to 3-rd parties, are used in line with the respective legislation.