MODEL CONTEXT PROTOCOL (MCP) AND SUPPLY-CHAIN SECURITY

WHAT A SUPPLY CHAIN IS A supply chain is everything you rely on but did not build yourself. When you buy a sandwich, you rely on the farm, the bakery, and the delivery truck. In software, your supply chain includes code libraries, packages, and servers written by others. A supply-chain attack compromises one of those outside pieces so the harm reaches you through something you trusted. Connecting an agent to a third-party MCP server is a supply-chain decision. Security researchers and government agencies have published studies and guidance about this risk. Academic studies of the public MCP ecosystem have identified vulnerable servers and some with suspicious tool descriptions, and the Open Worldwide Application Security Project (OWASP) has released a Top 10 list of MCP risks. The exact percentages reported vary from study to study, so treat any single number with caution. The lesson is steady across sources: an unvetted server is a real risk, not a theoretical one.