Yeah it's a pretty big flaw in the way MCP works, here's a good talk about that

→ View original post on X — @simonw