MCP servers may read/write files, use the network, and call third parties. Malicious or misconfigured servers can leak data. Listing on AgentHub is not a security audit.
Guides·MCP
Is MCP safe?
MCP permissions, supply-chain risk, and best practices.
Main risks
Recommendations
• Prefer official/trusted sources • Least-privilege env vars • Never commit secrets • Read-only DB users in prod • Test in isolation first