<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Security on Joel Merrick</title>
    <link>https://www.joelmerrick.co.uk/tags/security/</link>
    <description>Recent content in Security on Joel Merrick</description>
    <generator>Hugo</generator>
    <language>en-GB</language>
    <lastBuildDate>Mon, 16 Jun 2025 17:05:48 +0100</lastBuildDate>
    <atom:link href="https://www.joelmerrick.co.uk/tags/security/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Taming the Wild West of MCP Security</title>
      <link>https://www.joelmerrick.co.uk/blog/securing-mcp-membrane/</link>
      <pubDate>Mon, 16 Jun 2025 17:05:48 +0100</pubDate>
      <guid>https://www.joelmerrick.co.uk/blog/securing-mcp-membrane/</guid>
      <description>&lt;p&gt;I&amp;rsquo;ve been deep in the weeds of MCP security lately while building Membrane, a security shim for the Model Context Protocol. What started as a straightforward project quickly revealed just how complex securing AI tool integrations can be. The Model Context Protocol has become the de facto standard for connecting AI assistants to external tools and data sources, but with great power comes great responsibility.&lt;/p&gt;&#xA;&lt;div class=&#34;image-right&#34;&gt;&#xA;&lt;figure class=&#34;figure&#34;&gt;&lt;img class=&#34;ttpic&#34; src=&#34;https://www.joelmerrick.co.uk/images/blog/securing-mcp/cybersecurity_shield_hu_643d1219d8fabdbe.png&#34; alt=&#34;Cybersecurity shield protecting digital data&#34; width=&#34;200&#34; height=&#34;133&#34; loading=&#34;lazy&#34; decoding=&#34;async&#34;&gt;&lt;figcaption&gt;AI Security Protection&lt;/figcaption&gt;&lt;/figure&gt;&lt;/div&gt;&#xA;&lt;p&gt;The promise of MCP is compelling. Instead of building custom integrations for every tool an AI might need, you get a universal interface that lets AI systems interact with databases, APIs, file systems, and more through natural language. The reality is messier. When you give an AI system the ability to execute commands based on natural language instructions, you&amp;rsquo;re opening doors that traditional security models weren&amp;rsquo;t designed to handle.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
