MCP supercharges AI coding but opens injection attack surface
MCP lets AI coding assistants call external tools, databases, and CLIs, turning your IDE into an autonomous partner. That flexibility invites command‑injection, prompt‑injection, and token‑exfiltration—already exploited in Anthropic’s inspector and Git‑MCP servers—so every tool call needs explicit user approval and strict input sanitization.