Here's a walkthrough of a scenario where it's easy to expose secrets in MCP with Supabase.

I found the HackerNews thread interesting.

The Supabase team was discussing the mitigations they were taking to make MCP infiltrations less likely, including by automatically extending prompts with stronger instructions.

Many of the comments were pointing out that it doesn't make sense to treat MCP as the security boundary.

Finally people are starting to wake up to the LLM not being able to be used as a security boundary.