Audit of 70 MCP servers uncovers hidden outbound calls
A sandbox harness logged the startup behavior of 70 MCP servers, exposing three that make outbound HTTPS connections and one that reads /etc/passwd. The tool demonstrates that static analysis misses runtime risks, giving developers concrete evidence of hidden network or file-access activity.