Question 1

What are MCP security risks?

Accepted Answer

MCP (Model Context Protocol) lets AI agents connect to tools and data sources. Poorly configured manifests grant deletion rights, indefinite access, and shadow connections that exfiltrate data without user knowledge.

Question 2

What is CVE-2026-25253?

Accepted Answer

A critical vulnerability in early MCP implementations that allows agents to escalate permissions beyond the declared manifest scope, achieving unrestricted system access through permission chaining.

Question 3

How do I check my agent manifest is safe?

Accepted Answer

Use the MCP Permission Watchdog to audit all 6 permission dimensions: data sources, scope, duration, shadow connections, and irreversible actions. Any score above 50% requires immediate circuit breaker deployment.

Question 4

What is the Principle of Least Agency?

Accepted Answer

A security principle requiring AI agents to request only the minimum permissions needed for their task. Most MCP manifests violate this by requesting write, delete, and execute rights by default.

Question 5

What are shadow connections in MCP?

Accepted Answer

Undocumented API endpoints that agents connect to outside the declared manifest. These can exfiltrate data to third-party servers without appearing in permission logs.

Question 6

Should I use session-only or persistent MCP access?

Accepted Answer

Always use session-only access unless the agent explicitly needs state between sessions. Persistent and indefinite access tokens are the primary vector for MCP-based attacks.

Question 7

How do credit repair agencies audit MCP agents?

Accepted Answer

Agencies processing client PII through AI agents must audit every MCP manifest for GLBA compliance. The MCP Permission Watchdog generates the compliance documentation needed for audits.

Question 8

What is a circuit breaker for AI agents?

Accepted Answer

A safety mechanism that limits agent actions per session, requires human approval for destructive operations, and auto-revokes permissions after a timeout period. Essential for MCP security in 2026.

Ready to Automate 90% of Credit Repair Work?