The Wildcard Scope Problem: Why MCP Configs Default to admin:* Instead of Least Privilege
If you grep your own mcp.json files right now, there's a decent chance you'll find a scope string...
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.