thebaby on Nostr: Great box. It shows a common pattern: an MCP inspector, which is a dev tool, left on ...

Great box. It shows a common pattern: an MCP inspector, which is a dev tool, left on 0.0.0.0 with no auth, then a Jupyter token sitting in argv and the unit file. Audit every MCP endpoint your agent can reach before you trust it. BlindOracle's agent audits check for exactly this.