Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

Nagli

47,753 subscribers

46,322 views • 1 year ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

7 Comments

Nagli1 year ago

@AnthropicAI I would have expected either @cursor_ai or the Protocol itself to have some sort of "Please make sure there is nothing malicious going on". For now: 1. Don't use external MCP servers 2. If you have to, don't have Cursor agent on auto-run 3. Guardrail-wrap every message.

Breadcrumb1 year ago

Looking to automate reporting? Use AI agents to turn spreadsheets to reports in minutes without any coding.

s1r1us1 year ago

@cursor_ai @AnthropicAI even easier, just visit my website( without any mcp and get pwned.

Ori Livni1 year ago

@cursor_ai @AnthropicAI Sum it quite well no difference for AI bots. All this industry is a giant ActiveX

El11 year ago

@cursor_ai @AnthropicAI What potential measures you think companies can apply to prevent this while there is no clear rules defined yet ? Besides EDR? @galnagli

AndrewMohawk⁽ⁿᵘˡˡ⁾1 year ago

@cursor_ai @AnthropicAI What does "mcp_hacker Docs" do? Since thats actually whats taking the arbitrary text and executing it

Nagli1 year ago

@cursor_ai @AnthropicAI It’s an mcp I found called that basically seems to allow you to speak with arbitrary repositories documentation.

Related Videos

MCP is not just an API wrapper. it’s a way to provide ANY context to an LLM want great DX and have IDEs support features past a model’s cutoff date? MCP‼️ demo: GitHub pull request tool with Cursor Vercel AI SDK Auth0 how? custom MCP server by Javier

MCP is not just an API wrapper. it’s a way to provide ANY context to an LLM want great DX and have IDEs support features past a model’s cutoff date? MCP‼️ demo: GitHub pull request tool with Cursor Vercel AI SDK Auth0 how? custom MCP server by Javier

yenkel

26,843 views • 1 year ago

New course: MCP: Build Rich-Context AI Apps with Anthropic. Learn to build AI apps that access tools, data, and prompts using the Model Context Protocol in this short course, created in partnership with Anthropic Anthropic and taught by Elie Schoppik Elie Schoppik, its Head of Technical Education. Connecting AI applications to external systems that bring rich context to LLM-based applications has often meant writing custom integrations for each use case. MCP is an open protocol that standardizes how LLMs access tools, data, and prompts from external sources, and simplifies how you provide context to your LLM-based applications. For example, you can provide context via third-party tools that let your LLM make API calls to search the web, access data from local docs, retrieve code from a GitHub repo, and so on. MCP, developed by Anthropic, is based on a client-server architecture that defines the communication details between an MCP client, hosted inside the AI application, and an MCP server that exposes tools, resources, and prompt templates. The server can be a subprocess launched by the client that runs locally or an independent process running remotely. In this hands-on course, you'll learn the core architecture behind MCP. You’ll create an MCP-compatible chatbot, build and deploy an MCP server, and connect the chatbot to your MCP server and other open-source servers. Here’s what you’ll do: - Understand why MCP makes AI development less fragmented and standardizes connections between AI applications and external data sources - Learn the core components of the client-server architecture of MCP and the underlying communication mechanism - Build a chatbot with custom tools for searching academic papers, and transform it into an MCP-compatible application - Build a local MCP server that exposes tools, resources, and prompt templates using FastMCP, and test it using MCP Inspector - Create an MCP client inside your chatbot to dynamically connect to your server - Connect your chatbot to reference servers built by Anthropic’s MCP team, such as filesystem, which implements filesystem operations, and fetch, which extracts contents from the web as markdown - Configure Claude Desktop to connect to your server and others, and explore how it abstracts away the low-level logic of MCP clients - Deploy your MCP server remotely and test it with the Inspector or other MCP-compatible applications - Learn about the roadmap for future MCP development, such as multi-agent architecture, MCP registry API, server discovery, authorization, and authentication MCP is an exciting and important technology that lets you build rich-context AI applications that connect to a growing ecosystem of MCP servers, with minimal integration work. Please sign up here!

New course: MCP: Build Rich-Context AI Apps with Anthropic. Learn to build AI apps that access tools, data, and prompts using the Model Context Protocol in this short course, created in partnership with Anthropic Anthropic and taught by Elie Schoppik Elie Schoppik, its Head of Technical Education. Connecting AI applications to external systems that bring rich context to LLM-based applications has often meant writing custom integrations for each use case. MCP is an open protocol that standardizes how LLMs access tools, data, and prompts from external sources, and simplifies how you provide context to your LLM-based applications. For example, you can provide context via third-party tools that let your LLM make API calls to search the web, access data from local docs, retrieve code from a GitHub repo, and so on. MCP, developed by Anthropic, is based on a client-server architecture that defines the communication details between an MCP client, hosted inside the AI application, and an MCP server that exposes tools, resources, and prompt templates. The server can be a subprocess launched by the client that runs locally or an independent process running remotely. In this hands-on course, you'll learn the core architecture behind MCP. You’ll create an MCP-compatible chatbot, build and deploy an MCP server, and connect the chatbot to your MCP server and other open-source servers. Here’s what you’ll do: - Understand why MCP makes AI development less fragmented and standardizes connections between AI applications and external data sources - Learn the core components of the client-server architecture of MCP and the underlying communication mechanism - Build a chatbot with custom tools for searching academic papers, and transform it into an MCP-compatible application - Build a local MCP server that exposes tools, resources, and prompt templates using FastMCP, and test it using MCP Inspector - Create an MCP client inside your chatbot to dynamically connect to your server - Connect your chatbot to reference servers built by Anthropic’s MCP team, such as filesystem, which implements filesystem operations, and fetch, which extracts contents from the web as markdown - Configure Claude Desktop to connect to your server and others, and explore how it abstracts away the low-level logic of MCP clients - Deploy your MCP server remotely and test it with the Inspector or other MCP-compatible applications - Learn about the roadmap for future MCP development, such as multi-agent architecture, MCP registry API, server discovery, authorization, and authentication MCP is an exciting and important technology that lets you build rich-context AI applications that connect to a growing ecosystem of MCP servers, with minimal integration work. Please sign up here!

Andrew Ng

142,010 views • 1 year ago

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓

Santiago

39,944 views • 1 year ago

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.

Santiago

63,262 views • 1 year ago

I added a Knowledge Graph to Cursor using MCP. You gotta see this working! Knowledge graphs are a game-changer for AI Agents, and this is one example of how you can take advantage of them. How this works: 1. Cursor connects to Graphiti's MCP Server. Graphiti is a very popular open-source Knowledge Graph library for AI agents. 2. Graphiti connects to Neo4j running locally. Now, every time I interact with Cursor, the information is synthesized and stored in the knowledge graph. In short, Cursor now "remembers" everything about our project. Huge! Here is the video I recorded.

I added a Knowledge Graph to Cursor using MCP. You gotta see this working! Knowledge graphs are a game-changer for AI Agents, and this is one example of how you can take advantage of them. How this works: 1. Cursor connects to Graphiti's MCP Server. Graphiti is a very popular open-source Knowledge Graph library for AI agents. 2. Graphiti connects to Neo4j running locally. Now, every time I interact with Cursor, the information is synthesized and stored in the knowledge graph. In short, Cursor now "remembers" everything about our project. Huge! Here is the video I recorded.

Santiago

155,621 views • 1 year ago

Introducing Deep Graph Codebase to MCP with One Click... Now Available for Gemini CLI too! 🤩 Transform any public GitHub repository into an AI-ready Code Graph by simply changing the URL from to This instantly prepares the repository for seamless integration with AI assistants. It's that easy! You can now use repositories like ollama as a code graph within any project using Gemini CLI... just add the MCP Server JSON configuration to your .gemini/settings.json file

Introducing Deep Graph Codebase to MCP with One Click... Now Available for Gemini CLI too! 🤩 Transform any public GitHub repository into an AI-ready Code Graph by simply changing the URL from to This instantly prepares the repository for seamless integration with AI assistants. It's that easy! You can now use repositories like ollama as a code graph within any project using Gemini CLI... just add the MCP Server JSON configuration to your .gemini/settings.json file

Daniel San

53,516 views • 1 year ago

Cline can now create and add tools to himself using MCP! Try asking him to “add a tool that pulls the latest npm docs” - Cline handles everything from creating the MCP server to installing it *into himself*, ready for future tasks. Servers are saved in ~/Documents/Cline/MCP so you can easily share tools with friends!

Cline can now create and add tools to himself using MCP! Try asking him to “add a tool that pulls the latest npm docs” - Cline handles everything from creating the MCP server to installing it into himself, ready for future tasks. Servers are saved in ~/Documents/Cline/MCP so you can easily share tools with friends!

Saoud Rizwan

61,730 views • 1 year ago

🔥 The fal MCP Server is live ! Connect Claude, Cursor, or any AI assistant to 1,000+ generative AI models. Search models, generate images, create videos, check doc, create app : from a conversation. All the link to access it here 👇

🔥 The fal MCP Server is live ! Connect Claude, Cursor, or any AI assistant to 1,000+ generative AI models. Search models, generate images, create videos, check doc, create app : from a conversation. All the link to access it here 👇

fal

84,304 views • 4 months ago

Today we open Laravel MCP (beta) to the public! Laravel MCP is a library that makes it simple to build Model Context Protocol servers in your Laravel apps. This gives AI clients (like Claude, Cursor, & ChatGPT) a structured way to interact with your application. It's already been field tested by powering Laravel Boost.

Today we open Laravel MCP (beta) to the public! Laravel MCP is a library that makes it simple to build Model Context Protocol servers in your Laravel apps. This gives AI clients (like Claude, Cursor, & ChatGPT) a structured way to interact with your application. It's already been field tested by powering Laravel Boost.

Laravel

78,050 views • 10 months ago

X just made itself plug straight into AI tools with MCP servers. Your agents can now search and post on X directly. Not only read about it. Grok Build, Cursor, Claude, VS Code. All in. What you get: * X MCP; search posts, trends, bookmarks, even publish Articles * Docs MCP; API docs inside your workflow, no tab switching Setup is straightforward: * Go to create an X app * Enable OAuth 2.0; required for authentication * Add redirect URI; * Copy your CLIENT_ID and CLIENT_SECRET * Plug those into your MCP client or config * Run the setup commands; connect X MCP and Docs MCP * Log in once via browser; approve access * Verify; run grok mcp doctor xapi and grok mcp list Log in once. Done. Your workflow now includes X itself. X

X just made itself plug straight into AI tools with MCP servers. Your agents can now search and post on X directly. Not only read about it. Grok Build, Cursor, Claude, VS Code. All in. What you get: * X MCP; search posts, trends, bookmarks, even publish Articles * Docs MCP; API docs inside your workflow, no tab switching Setup is straightforward: * Go to create an X app * Enable OAuth 2.0; required for authentication * Add redirect URI; * Copy your CLIENT_ID and CLIENT_SECRET * Plug those into your MCP client or config * Run the setup commands; connect X MCP and Docs MCP * Log in once via browser; approve access * Verify; run grok mcp doctor xapi and grok mcp list Log in once. Done. Your workflow now includes X itself. X

Mario Nawfal

59,976 views • 29 days ago

MCP is mind-blowing. Here is a genius setup that will earn you a promotion with your manager. I have multiple data sources: data in S3, MySQL, and local files. Using Spice (an open-source project), I can co-locate all of that data behind a single SQL endpoint and augment it using MCP. Before, accessing data was slow, and I had to make multiple requests to get anything. After using Spice, I can query the data much faster (since it's mirrored locally), and I don't have to worry about where the data is coming from. Spice acts as an MCP server, so I can connect to it from my IDE or the Claude Desktop app and have access to all the data. But even more cool than that: Spice also acts as an MCP client, so it can connect to other MCP servers. This is where things get really interesting! Watch the video. I'm querying multiple data sources from my IDE and using the Google Maps MCP server for driving directions.

MCP is mind-blowing. Here is a genius setup that will earn you a promotion with your manager. I have multiple data sources: data in S3, MySQL, and local files. Using Spice (an open-source project), I can co-locate all of that data behind a single SQL endpoint and augment it using MCP. Before, accessing data was slow, and I had to make multiple requests to get anything. After using Spice, I can query the data much faster (since it's mirrored locally), and I don't have to worry about where the data is coming from. Spice acts as an MCP server, so I can connect to it from my IDE or the Claude Desktop app and have access to all the data. But even more cool than that: Spice also acts as an MCP client, so it can connect to other MCP servers. This is where things get really interesting! Watch the video. I'm querying multiple data sources from my IDE and using the Google Maps MCP server for driving directions.

Santiago

142,696 views • 1 year ago

"I built a $250,000 SaaS in 4 months with AI and barely knew how to code." I'm starting to think that a coding ide like cursor/windsurf can become the everything app for creators this custom mode wrote a linkedin post that reads better than tools charging $50+ a month it can do it's own research using web searches or using the brave mcp with a free api key it's not hard to imagine that I could also hook this up to an mcp to create posts on linkedin and have my publishing schedule managed from a json file inside cursor yes, linkedin is cringe, but this is just the beginning of what will be possible soon i'm not gonna say that mcp is "wild" or "this changes everything" but it's quite exciting to see how this is going to be used

"I built a $250,000 SaaS in 4 months with AI and barely knew how to code." I'm starting to think that a coding ide like cursor/windsurf can become the everything app for creators this custom mode wrote a linkedin post that reads better than tools charging $50+ a month it can do it's own research using web searches or using the brave mcp with a free api key it's not hard to imagine that I could also hook this up to an mcp to create posts on linkedin and have my publishing schedule managed from a json file inside cursor yes, linkedin is cringe, but this is just the beginning of what will be possible soon i'm not gonna say that mcp is "wild" or "this changes everything" but it's quite exciting to see how this is going to be used

Ian Nuttall

25,529 views • 1 year ago

Introducing Open MCP Client 🪁 Chat with any MCP server in your own app, just grab a URL from . The team and I vibe coded with Cursor this weekend and built: 1. The first web-based MCP client (link👇) 2. An open-source client you can add into any app How it's built It uses CopilotKit🪁 for the client and interactivity layer, and connects to a 40 line LangGraph ReAct agent that coordinates MCP calls. Hosted on Vercel. Kudos to Suhas Deshpande and Tyler Slaton for hacking and thanks to Harrison Chase for pointers!

Introducing Open MCP Client 🪁 Chat with any MCP server in your own app, just grab a URL from . The team and I vibe coded with Cursor this weekend and built: 1. The first web-based MCP client (link👇) 2. An open-source client you can add into any app How it's built It uses CopilotKit🪁 for the client and interactivity layer, and connects to a 40 line LangGraph ReAct agent that coordinates MCP calls. Hosted on Vercel. Kudos to Suhas Deshpande and Tyler Slaton for hacking and thanks to Harrison Chase for pointers!

Atai Barkai

299,711 views • 1 year ago

I wrote a Cursor Figma MCP server to make it easier for AI copilots to implement designs. It's not perfect, but the resulting HTML and CSS is a lot cleaner than giving AI a screenshot and having it guess. Link in the replies, take it for a spin and let me know what you think!

I wrote a Cursor Figma MCP server to make it easier for AI copilots to implement designs. It's not perfect, but the resulting HTML and CSS is a lot cleaner than giving AI a screenshot and having it guess. Link in the replies, take it for a spin and let me know what you think!

Graham Lipsman

102,535 views • 1 year ago

I'm still picking my jaw off the floor with this MCP update: Postman will now automatically build an MCP server for an API. Automatically! You select your API and the requests you want to include, and Potman will generate a Zip file with everything you need. In collaboration with Postman, I recorded a video showing how I generated an MCP server for the Google Maps API. It's glorious! Also, and before I forget: You can now test any MCP server with your Postman application. They built MCP right in, so now you can: • Connect to an MCP server • List out all of the available tools • Test any of the tools This is a 10x boost for the MCP ecosystem. If you've tried the default MCP debugger, you'll understand how huge a deal it is that you can do all of that from Postman now. Go here to give this a try:

I'm still picking my jaw off the floor with this MCP update: Postman will now automatically build an MCP server for an API. Automatically! You select your API and the requests you want to include, and Potman will generate a Zip file with everything you need. In collaboration with Postman, I recorded a video showing how I generated an MCP server for the Google Maps API. It's glorious! Also, and before I forget: You can now test any MCP server with your Postman application. They built MCP right in, so now you can: • Connect to an MCP server • List out all of the available tools • Test any of the tools This is a 10x boost for the MCP ecosystem. If you've tried the default MCP debugger, you'll understand how huge a deal it is that you can do all of that from Postman now. Go here to give this a try:

Santiago

215,882 views • 1 year ago

🤯 Building computer-vision applications is never going to be the same again. As Andrej Karpathy says, "English is going to be the new programming-language", and we just made that happen for programming visual AI. 👨‍💻 This past month, the VLM Run team cooked up something magical that I'm especially proud of - a natural-language interface to build and run computer vision workflows (object-detection, OCR, parsing, and so much more) – all via our new VLM Run MCP server. 🔌 It works with any MCP-compatible AI agent (Claude, OpenAI, Cursor, etc.) and abstracts complex visual workflows into simple English commands. No need to write Python or fiddle with bespoke computer-vision code – just say what you want your agent to do, and it does it. Here’s a glimpse into what you can build today ( ☑️ Image AI agents – run detection, tagging, blurring, cropping, and more traditional CV tasks with English ☑️ Document AI agents – extract totals from invoices, search visual content, or act on what’s found ☑️ Video AI agents – understand scene content, trim clips, add subtitles, and create ready-to-share edits ☑️ And best-of-all, it's fully programmable with English. 🧑‍🍳 MCP Showcase: 📚 MCP Cookbooks: 📚 MCP Docs: #computervision #ai #agents #llm #vlm #mcp #vibecoding #genai

🤯 Building computer-vision applications is never going to be the same again. As Andrej Karpathy says, "English is going to be the new programming-language", and we just made that happen for programming visual AI. 👨‍💻 This past month, the VLM Run team cooked up something magical that I'm especially proud of - a natural-language interface to build and run computer vision workflows (object-detection, OCR, parsing, and so much more) – all via our new VLM Run MCP server. 🔌 It works with any MCP-compatible AI agent (Claude, OpenAI, Cursor, etc.) and abstracts complex visual workflows into simple English commands. No need to write Python or fiddle with bespoke computer-vision code – just say what you want your agent to do, and it does it. Here’s a glimpse into what you can build today ( ☑️ Image AI agents – run detection, tagging, blurring, cropping, and more traditional CV tasks with English ☑️ Document AI agents – extract totals from invoices, search visual content, or act on what’s found ☑️ Video AI agents – understand scene content, trim clips, add subtitles, and create ready-to-share edits ☑️ And best-of-all, it's fully programmable with English. 🧑‍🍳 MCP Showcase: 📚 MCP Cookbooks: 📚 MCP Docs: #computervision #ai #agents #llm #vlm #mcp #vibecoding #genai

Sudeep Pillai

17,789 views • 1 year ago

MCP now supports authentication using OAuth2. This is huge! I want to share a complete example (code) so you can learn how to use it. Here is the thing: You don't want to build agentic applications that access resources without proper guardrails. With authentication, you can: • Call third-party APIs on the user's behalf • Perform actions that should be traceable • Enforce different permissions for different roles Here is an MCP-based web shop demo, built with WorkOS AuthKit and Next.js. With this example, you can do the following: • Connect to an MCP server • Authenticate using AuthKit • Order a T-shirt using MCP tools • View order details if you are an admin This GitHub repository contains everything you need: The WorkOS team has one of the best authentication platforms in the world. If you haven't looked into AuthKit, take a look at the code of this demo. Thanks to the WorkOS team for sponsoring this post.

MCP now supports authentication using OAuth2. This is huge! I want to share a complete example (code) so you can learn how to use it. Here is the thing: You don't want to build agentic applications that access resources without proper guardrails. With authentication, you can: • Call third-party APIs on the user's behalf • Perform actions that should be traceable • Enforce different permissions for different roles Here is an MCP-based web shop demo, built with WorkOS AuthKit and Next.js. With this example, you can do the following: • Connect to an MCP server • Authenticate using AuthKit • Order a T-shirt using MCP tools • View order details if you are an admin This GitHub repository contains everything you need: The WorkOS team has one of the best authentication platforms in the world. If you haven't looked into AuthKit, take a look at the code of this demo. Thanks to the WorkOS team for sponsoring this post.

Santiago

33,004 views • 8 months ago