MCP Server Production Issues

<p>In January and February 2026, security researchers filed <a href="https://www.heyuan110.com/posts/ai/2026-03-10-mcp-security-2026/" rel="noopener noreferrer">30 CVEs against

<p>Most API documentation is written for humans.</p> <p>MCP tool descriptions are different.</p> <p>They are read by the model that decides what to call next.</p> <p>That means

<p><a class="article-body-image-wrapper"

<p>Most MCP tutorials stop at a single stdio tool. These notes cover what I had to change once a server of mine had actual users, in the order the problems appeared.</p> <h2>

<h2> The Setup </h2> <p>MCP (Model Context Protocol) lets AI agents call external tools. Instead of just reading files and running bash, the agent gets structured access to APIs,

<h2> The Problem </h2> <p>The MCP ecosystem is expanding at an extraordinary pace. Anthropic, Microsoft, Google, AWS, and Cloudflare are all publishing official MCP servers.

<p>Like a lot of developers in this market, I’ve been taking freelance assessments and Discord job leads more seriously than I normally would.</p> <p>One of those assessments

<p>MCP is one of the most thoughtfully scoped technical standards to come out of the AI ecosystem. That scope is intentional. Understanding exactly where MCP stops is the