Introducing MCP Inspector: Know an MCP Server’s Risks Before You Install It
Meet MCP Inspector, a free tool from Pluto Research that checks MCP servers for security risks before you install them. Built from the findings behind Operation:MCP.
Inside Pluto
From Our Blog
Read about our latest announcements.
Loading posts ...
Enterprise AI Guardrails: How to Build Policy Enforcement That Actually Works
The rapid adoption of Generative AI, which has evolved from experimentation to enterprise-wide use, has revealed a critical reality: most organizations have AI policies, but…
Your CI Pipeline Is a Credential Vending Machine: 7 Lessons from the TeamPCP supply-chain attacks
TeamPCP turned trusted automation into a path for credential theft and lateral compromise. Based on 37 mapped incidents, here are seven controls defenders should prioritize…
The Manipulated Agent: When Apify’s MCP Turns Against You
Apify's official MCP connector let a scraped web page trigger a second, authenticated Apify action nobody asked for. Chapter 3 of Operation: MCP breaks down…
Eitan Chassid
Yotam Perkal
The Notebook Backdoor: Taking Over jupyter-mcp-server’s Live Notebook Connection
If your company has data analysts or data scientists, they’re probably using Jupyter. And like all other employees these days, they’re probably also using an…
Avishai Gonen
The MCP Debrief – What’s Actually Running on Your Endpoints
MCP has quickly become the default way enterprise AI agents reach internal systems, and most security teams do not yet have a real inventory of…
AI Agent Authorization at the Endpoint: Why Least Privilege Breaks Down for Non-Human Identities
Enterprise security has long relied on a fundamental assumption: identities are human. Identity and Access Management (IAM) has evolved to authenticate people and enforce access…
Timor Halabi