Загрузка видео...

Не удалось загрузить видео

На главную

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

galnagli's profile picture

Nagli

48,126 subscribers

46,417 просмотров • 1 год назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 7

Фото профиля Nagli
Nagli1 год назад

@AnthropicAI I would have expected either @cursor_ai or the Protocol itself to have some sort of "Please make sure there is nothing malicious going on". For now: 1. Don't use external MCP servers 2. If you have to, don't have Cursor agent on auto-run 3. Guardrail-wrap every message.

Фото профиля Breadcrumb
Breadcrumb1 год назад

Looking to automate reporting? Use AI agents to turn spreadsheets to reports in minutes without any coding.

Фото профиля s1r1us
s1r1us1 год назад

@cursor_ai @AnthropicAI even easier, just visit my website( without any mcp and get pwned.

Фото профиля Ori Livni
Ori Livni1 год назад

@cursor_ai @AnthropicAI Sum it quite well no difference for AI bots. All this industry is a giant ActiveX

Фото профиля El1
El11 год назад

@cursor_ai @AnthropicAI What potential measures you think companies can apply to prevent this while there is no clear rules defined yet ? Besides EDR? @galnagli

Фото профиля AndrewMohawk⁽ⁿᵘˡˡ⁾
AndrewMohawk⁽ⁿᵘˡˡ⁾1 год назад

@cursor_ai @AnthropicAI What does "mcp_hacker Docs" do? Since thats actually whats taking the arbitrary text and executing it

Фото профиля Nagli
Nagli1 год назад

@cursor_ai @AnthropicAI It’s an mcp I found called that basically seems to allow you to speak with arbitrary repositories documentation.

Похожие видео

MCP is not just an API wrapper. it’s a way to provide ANY context to an LLM want great DX and have IDEs support features past a model’s cutoff date? MCP‼️ demo: GitHub pull request tool with Cursor Vercel AI SDK Auth0 how? custom MCP server by Javier
0:37

MCP is not just an API wrapper. it’s a way to provide ANY context to an LLM want great DX and have IDEs support features past a model’s cutoff date? MCP‼️ demo: GitHub pull request tool with Cursor Vercel AI SDK Auth0 how? custom MCP server by Javier

yenkel

26,843 просмотров • 1 год назад

New course: MCP: Build Rich-Context AI Apps with Anthropic. Learn to build AI apps that access tools, data, and prompts using the Model Context Protocol in this short course, created in partnership with Anthropic Anthropic and taught by Elie Schoppik Elie Schoppik, its Head of Technical Education. Connecting AI applications to external systems that bring rich context to LLM-based applications has often meant writing custom integrations for each use case. MCP is an open protocol that standardizes how LLMs access tools, data, and prompts from external sources, and simplifies how you provide context to your LLM-based applications. For example, you can provide context via third-party tools that let your LLM make API calls to search the web, access data from local docs, retrieve code from a GitHub repo, and so on. MCP, developed by Anthropic, is based on a client-server architecture that defines the communication details between an MCP client, hosted inside the AI application, and an MCP server that exposes tools, resources, and prompt templates. The server can be a subprocess launched by the client that runs locally or an independent process running remotely. In this hands-on course, you'll learn the core architecture behind MCP. You’ll create an MCP-compatible chatbot, build and deploy an MCP server, and connect the chatbot to your MCP server and other open-source servers. Here’s what you’ll do: - Understand why MCP makes AI development less fragmented and standardizes connections between AI applications and external data sources - Learn the core components of the client-server architecture of MCP and the underlying communication mechanism - Build a chatbot with custom tools for searching academic papers, and transform it into an MCP-compatible application - Build a local MCP server that exposes tools, resources, and prompt templates using FastMCP, and test it using MCP Inspector - Create an MCP client inside your chatbot to dynamically connect to your server - Connect your chatbot to reference servers built by Anthropic’s MCP team, such as filesystem, which implements filesystem operations, and fetch, which extracts contents from the web as markdown - Configure Claude Desktop to connect to your server and others, and explore how it abstracts away the low-level logic of MCP clients - Deploy your MCP server remotely and test it with the Inspector or other MCP-compatible applications - Learn about the roadmap for future MCP development, such as multi-agent architecture, MCP registry API, server discovery, authorization, and authentication MCP is an exciting and important technology that lets you build rich-context AI applications that connect to a growing ecosystem of MCP servers, with minimal integration work. Please sign up here!
2:43

New course: MCP: Build Rich-Context AI Apps with Anthropic. Learn to build AI apps that access tools, data, and prompts using the Model Context Protocol in this short course, created in partnership with Anthropic Anthropic and taught by Elie Schoppik Elie Schoppik, its Head of Technical Education. Connecting AI applications to external systems that bring rich context to LLM-based applications has often meant writing custom integrations for each use case. MCP is an open protocol that standardizes how LLMs access tools, data, and prompts from external sources, and simplifies how you provide context to your LLM-based applications. For example, you can provide context via third-party tools that let your LLM make API calls to search the web, access data from local docs, retrieve code from a GitHub repo, and so on. MCP, developed by Anthropic, is based on a client-server architecture that defines the communication details between an MCP client, hosted inside the AI application, and an MCP server that exposes tools, resources, and prompt templates. The server can be a subprocess launched by the client that runs locally or an independent process running remotely. In this hands-on course, you'll learn the core architecture behind MCP. You’ll create an MCP-compatible chatbot, build and deploy an MCP server, and connect the chatbot to your MCP server and other open-source servers. Here’s what you’ll do: - Understand why MCP makes AI development less fragmented and standardizes connections between AI applications and external data sources - Learn the core components of the client-server architecture of MCP and the underlying communication mechanism - Build a chatbot with custom tools for searching academic papers, and transform it into an MCP-compatible application - Build a local MCP server that exposes tools, resources, and prompt templates using FastMCP, and test it using MCP Inspector - Create an MCP client inside your chatbot to dynamically connect to your server - Connect your chatbot to reference servers built by Anthropic’s MCP team, such as filesystem, which implements filesystem operations, and fetch, which extracts contents from the web as markdown - Configure Claude Desktop to connect to your server and others, and explore how it abstracts away the low-level logic of MCP clients - Deploy your MCP server remotely and test it with the Inspector or other MCP-compatible applications - Learn about the roadmap for future MCP development, such as multi-agent architecture, MCP registry API, server discovery, authorization, and authentication MCP is an exciting and important technology that lets you build rich-context AI applications that connect to a growing ecosystem of MCP servers, with minimal integration work. Please sign up here!

Andrew Ng

142,256 просмотров • 1 год назад

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓
0:43

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓

Santiago

39,944 просмотров • 1 год назад

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.
5:21

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.

Santiago

63,316 просмотров • 1 год назад

I added a Knowledge Graph to Cursor using MCP. You gotta see this working! Knowledge graphs are a game-changer for AI Agents, and this is one example of how you can take advantage of them. How this works: 1. Cursor connects to Graphiti's MCP Server. Graphiti is a very popular open-source Knowledge Graph library for AI agents. 2. Graphiti connects to Neo4j running locally. Now, every time I interact with Cursor, the information is synthesized and stored in the knowledge graph. In short, Cursor now "remembers" everything about our project. Huge! Here is the video I recorded.
11:39

I added a Knowledge Graph to Cursor using MCP. You gotta see this working! Knowledge graphs are a game-changer for AI Agents, and this is one example of how you can take advantage of them. How this works: 1. Cursor connects to Graphiti's MCP Server. Graphiti is a very popular open-source Knowledge Graph library for AI agents. 2. Graphiti connects to Neo4j running locally. Now, every time I interact with Cursor, the information is synthesized and stored in the knowledge graph. In short, Cursor now "remembers" everything about our project. Huge! Here is the video I recorded.

Santiago

155,647 просмотров • 1 год назад

Introducing Deep Graph Codebase to MCP with One Click... Now Available for Gemini CLI too! 🤩 Transform any public GitHub repository into an AI-ready Code Graph by simply changing the URL from to This instantly prepares the repository for seamless integration with AI assistants. It's that easy! You can now use repositories like ollama as a code graph within any project using Gemini CLI... just add the MCP Server JSON configuration to your .gemini/settings.json file
1:01

Introducing Deep Graph Codebase to MCP with One Click... Now Available for Gemini CLI too! 🤩 Transform any public GitHub repository into an AI-ready Code Graph by simply changing the URL from to This instantly prepares the repository for seamless integration with AI assistants. It's that easy! You can now use repositories like ollama as a code graph within any project using Gemini CLI... just add the MCP Server JSON configuration to your .gemini/settings.json file

Daniel San

53,516 просмотров • 1 год назад

Cline can now create and add tools to himself using MCP! Try asking him to “add a tool that pulls the latest npm docs” - Cline handles everything from creating the MCP server to installing it *into himself*, ready for future tasks. Servers are saved in ~/Documents/Cline/MCP so you can easily share tools with friends!
3:24

Cline can now create and add tools to himself using MCP! Try asking him to “add a tool that pulls the latest npm docs” - Cline handles everything from creating the MCP server to installing it *into himself*, ready for future tasks. Servers are saved in ~/Documents/Cline/MCP so you can easily share tools with friends!

Saoud Rizwan

62,122 просмотров • 1 год назад

🔥 The fal MCP Server is live ! Connect Claude, Cursor, or any AI assistant to 1,000+ generative AI models. Search models, generate images, create videos, check doc, create app : from a conversation. All the link to access it here 👇
1:34

🔥 The fal MCP Server is live ! Connect Claude, Cursor, or any AI assistant to 1,000+ generative AI models. Search models, generate images, create videos, check doc, create app : from a conversation. All the link to access it here 👇

fal

84,408 просмотров • 6 месяцев назад

Today we open Laravel MCP (beta) to the public! Laravel MCP is a library that makes it simple to build Model Context Protocol servers in your Laravel apps. This gives AI clients (like Claude, Cursor, & ChatGPT) a structured way to interact with your application. It's already been field tested by powering Laravel Boost.
0:21

Today we open Laravel MCP (beta) to the public! Laravel MCP is a library that makes it simple to build Model Context Protocol servers in your Laravel apps. This gives AI clients (like Claude, Cursor, & ChatGPT) a structured way to interact with your application. It's already been field tested by powering Laravel Boost.

Laravel

78,081 просмотров • 1 год назад

1Password has a clever MCP allowing to get passwords without revealing them in plain text leaking into the agent session transcript Of course Apple Passwords does provide MCP, that is until now Passtrami is a macOS app providing MCP. It works with any agents such as codex, claude code, cursor etc. You are still in charge approving each password with TouchID
0:52

1Password has a clever MCP allowing to get passwords without revealing them in plain text leaking into the agent session transcript Of course Apple Passwords does provide MCP, that is until now Passtrami is a macOS app providing MCP. It works with any agents such as codex, claude code, cursor etc. You are still in charge approving each password with TouchID

Sash Zats

52,455 просмотров • 23 дней назад

X just made itself plug straight into AI tools with MCP servers. Your agents can now search and post on X directly. Not only read about it. Grok Build, Cursor, Claude, VS Code. All in. What you get: * X MCP; search posts, trends, bookmarks, even publish Articles * Docs MCP; API docs inside your workflow, no tab switching Setup is straightforward: * Go to create an X app * Enable OAuth 2.0; required for authentication * Add redirect URI; * Copy your CLIENT_ID and CLIENT_SECRET * Plug those into your MCP client or config * Run the setup commands; connect X MCP and Docs MCP * Log in once via browser; approve access * Verify; run grok mcp doctor xapi and grok mcp list Log in once. Done. Your workflow now includes X itself. X
0:42

X just made itself plug straight into AI tools with MCP servers. Your agents can now search and post on X directly. Not only read about it. Grok Build, Cursor, Claude, VS Code. All in. What you get: * X MCP; search posts, trends, bookmarks, even publish Articles * Docs MCP; API docs inside your workflow, no tab switching Setup is straightforward: * Go to create an X app * Enable OAuth 2.0; required for authentication * Add redirect URI; * Copy your CLIENT_ID and CLIENT_SECRET * Plug those into your MCP client or config * Run the setup commands; connect X MCP and Docs MCP * Log in once via browser; approve access * Verify; run grok mcp doctor xapi and grok mcp list Log in once. Done. Your workflow now includes X itself. X

Mario Nawfal

59,976 просмотров • 3 месяцев назад

MCP is mind-blowing. Here is a genius setup that will earn you a promotion with your manager. I have multiple data sources: data in S3, MySQL, and local files. Using Spice (an open-source project), I can co-locate all of that data behind a single SQL endpoint and augment it using MCP. Before, accessing data was slow, and I had to make multiple requests to get anything. After using Spice, I can query the data much faster (since it's mirrored locally), and I don't have to worry about where the data is coming from. Spice acts as an MCP server, so I can connect to it from my IDE or the Claude Desktop app and have access to all the data. But even more cool than that: Spice also acts as an MCP client, so it can connect to other MCP servers. This is where things get really interesting! Watch the video. I'm querying multiple data sources from my IDE and using the Google Maps MCP server for driving directions.
14:14

MCP is mind-blowing. Here is a genius setup that will earn you a promotion with your manager. I have multiple data sources: data in S3, MySQL, and local files. Using Spice (an open-source project), I can co-locate all of that data behind a single SQL endpoint and augment it using MCP. Before, accessing data was slow, and I had to make multiple requests to get anything. After using Spice, I can query the data much faster (since it's mirrored locally), and I don't have to worry about where the data is coming from. Spice acts as an MCP server, so I can connect to it from my IDE or the Claude Desktop app and have access to all the data. But even more cool than that: Spice also acts as an MCP client, so it can connect to other MCP servers. This is where things get really interesting! Watch the video. I'm querying multiple data sources from my IDE and using the Google Maps MCP server for driving directions.

Santiago

142,696 просмотров • 1 год назад

How to Get React Router v7 to work with AI This example uses Cursor rules, but the concept is the same no matter the AI tool: - Give the LLM context (I've already done this part for you) - Use an MCP server (GitMCP is great here) for specific questions
2:19

How to Get React Router v7 to work with AI This example uses Cursor rules, but the concept is the same no matter the AI tool: - Give the LLM context (I've already done this part for you) - Use an MCP server (GitMCP is great here) for specific questions

Brooks Lybrand

10,183 просмотров • 1 год назад

Martin Keen from IBM just explained the debate that's splitting Claude and AI agent developers in half CLI vs MCP - and the answer will save you thousands of tokens > GitHub MCP server loads 80 tools into context = 55,000 tokens before your agent does anything > CLI: agent already knows grep, cat, git cold from training data > MCP wins when Claude needs to render a JavaScript page - curl can't do that, MCP browser server can in 250 tokens > MCP wins for Slack, Notion, databases - OAuth handled by the server, not the agent the rule: use CLI when commands map directly to the job, use MCP when the abstraction earns its cost full breakdown above
13:25

Martin Keen from IBM just explained the debate that's splitting Claude and AI agent developers in half CLI vs MCP - and the answer will save you thousands of tokens > GitHub MCP server loads 80 tools into context = 55,000 tokens before your agent does anything > CLI: agent already knows grep, cat, git cold from training data > MCP wins when Claude needs to render a JavaScript page - curl can't do that, MCP browser server can in 250 tokens > MCP wins for Slack, Notion, databases - OAuth handled by the server, not the agent the rule: use CLI when commands map directly to the job, use MCP when the abstraction earns its cost full breakdown above

Mr. Buzzoni

40,771 просмотров • 4 месяцев назад

"I built a $250,000 SaaS in 4 months with AI and barely knew how to code." I'm starting to think that a coding ide like cursor/windsurf can become the everything app for creators this custom mode wrote a linkedin post that reads better than tools charging $50+ a month it can do it's own research using web searches or using the brave mcp with a free api key it's not hard to imagine that I could also hook this up to an mcp to create posts on linkedin and have my publishing schedule managed from a json file inside cursor yes, linkedin is cringe, but this is just the beginning of what will be possible soon i'm not gonna say that mcp is "wild" or "this changes everything" but it's quite exciting to see how this is going to be used
0:21

"I built a $250,000 SaaS in 4 months with AI and barely knew how to code." I'm starting to think that a coding ide like cursor/windsurf can become the everything app for creators this custom mode wrote a linkedin post that reads better than tools charging $50+ a month it can do it's own research using web searches or using the brave mcp with a free api key it's not hard to imagine that I could also hook this up to an mcp to create posts on linkedin and have my publishing schedule managed from a json file inside cursor yes, linkedin is cringe, but this is just the beginning of what will be possible soon i'm not gonna say that mcp is "wild" or "this changes everything" but it's quite exciting to see how this is going to be used

Ian Nuttall

25,659 просмотров • 1 год назад

Introducing Open MCP Client 🪁 Chat with any MCP server in your own app, just grab a URL from . The team and I vibe coded with Cursor this weekend and built: 1. The first web-based MCP client (link👇) 2. An open-source client you can add into any app How it's built It uses CopilotKit🪁 for the client and interactivity layer, and connects to a 40 line LangGraph ReAct agent that coordinates MCP calls. Hosted on Vercel. Kudos to Suhas Deshpande and Tyler Slaton for hacking and thanks to Harrison Chase for pointers!
1:00

Introducing Open MCP Client 🪁 Chat with any MCP server in your own app, just grab a URL from . The team and I vibe coded with Cursor this weekend and built: 1. The first web-based MCP client (link👇) 2. An open-source client you can add into any app How it's built It uses CopilotKit🪁 for the client and interactivity layer, and connects to a 40 line LangGraph ReAct agent that coordinates MCP calls. Hosted on Vercel. Kudos to Suhas Deshpande and Tyler Slaton for hacking and thanks to Harrison Chase for pointers!

Atai Barkai

299,864 просмотров • 1 год назад

A lot of people asked how to connect Burp Suite MCP with OpenCode after my burpsuite mcp with Claude Code guide. So here you go 👇 1. Fire up Burp → Install the MCP extension → Run the required BMCP setup checks 2. Follow the setup guide → BMCP + Claude Code guide 3. Connect it to OpenCode opencode mcp add → Server name: burp → Server type: remote → Address: 127.0.0.1:9876 And that's it. I tested it by opening example./com through Burp and interacting with it using OpenCode + Burp MCP. If you're already using OpenCode for security work, this is a pretty clean way to bring Burp into the workflow. 🔥
2:08

A lot of people asked how to connect Burp Suite MCP with OpenCode after my burpsuite mcp with Claude Code guide. So here you go 👇 1. Fire up Burp → Install the MCP extension → Run the required BMCP setup checks 2. Follow the setup guide → BMCP + Claude Code guide 3. Connect it to OpenCode opencode mcp add → Server name: burp → Server type: remote → Address: 127.0.0.1:9876 And that's it. I tested it by opening example./com through Burp and interacting with it using OpenCode + Burp MCP. If you're already using OpenCode for security work, this is a pretty clean way to bring Burp into the workflow. 🔥

Abhishek

15,089 просмотров • 1 месяц назад