You really need to stay critical with yourself when building an MVP.
I thought physical separation was mandatory for a high-security MCP server.
Turns out itโs not.
After a week digging into MCP security incidents, I found RCE only happened when servers exposed remote coding.
My MVP wonโt allow code execution. Each MCP server will be isolated in Docker on a single hostโenough for now.
Focus: secure AI โ data connections, no human-in-the-loop friction, traffic monitoring + threat analysis with injected prompts to catch manipulation.
@icanvardar Donโt know, but I like to pay the people I consume content from.
Not trying to cheap out.
But who knows how much actually reaches the artist on the mainstream apps?
Do you ever compromise on security?
Physical separation isnโt really optional when dealing with real customers and SaaS. - IMO.
But wowโฆ it eats up time.
Where do you draw the line?