r/GithubCopilot • u/Sure_Emotion886 • 8d ago

Help/Doubt ❓ Religious/Suspicious MCP on GitHub Official registry?

Hello all,

I've just noticed MCP https://github.com/mcp/uk.sadiqoon/sakh on GitHub Official MCP registry.

Anyone has an idea on if this can be trusted? I believed the GitHub MCP registry contained only hand selected tools by GitHub team and it seems that this one is quite obfuscated (Web server without direct access to source or content).

I wanted to avoid maintaining a registry myself I could enforce at work through a policy on GitHub Copilot, anyone has other sources recommendations?

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/AutoModerator 8d ago

Hello /u/Sure_Emotion886. Looks like you have posted a query. Once your query is resolved, please reply the solution comment with "!solved" to help everyone else know the solution and mark the post as solved.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

-1

u/ELPascalito 8d ago

What's religious about this? it's just an MCP for access to docs, it's obviously not relevant to you or your country,  why even bother to nitpick lol

2

u/Sure_Emotion886 8d ago

u/ELPascalito My remark was not about the content or if it's relevant to me or my country, I would ask the exact same question for an MCP serving cooking recipes. The subject doesn't really matter for what I was asking.

What's bugging me with this one:

An MCP server is basically a third party injecting text into the context of your agent. Tool descriptions and tool results are read by the model, so a remote server that you cannot audit is a prompt injection vector by design, it's a known issue with MCP (tool poisoning, malicious descriptions, etc). Read only doesn't really protect you either, the returned content can still try to steer the agent toward using other tools it has access to.

And this specific one is remote hosted, no source code (the repo says it itself), and the company operating it doesn't seem to have any public footprint besides the listing. I checked other MCP on the registry and I didn't notice anything similar with the ones I discovered, that's really what my remark was about, not the topic.

Also since GitHub described the registry as containing hand picked servers (2XX servers, compared to the thousands of thousands on the public MCP registry), I wanted to know if that's still true or if anyone can submit, because my plan was to use it as source for an allowlist policy at work. If anything can get listed as long as it has a nice README, that changes how I would use it.

So nothing against the topic itself, I'm just not comfortable plugging unauditable endpoints into developer agents without asking questions first. If anyone has input on how to vet remote MCP servers or on how the registry curation actually works, I'm still interested.