I pointed capgate at Damn Vulnerable MCP. Here's what it caught — and what it couldn't. (opens in new tab)

A capability-compiler meets ten deliberately-broken MCP servers. The honest scorecard: it cleanly stops one class, shrinks the blast radius on several, and is useless against another. Knowing which is which is the whole point. Disclosure: I'm the author of capgate, the Apache-2.0 sandbox compiler this post puts to the test. The DVMCP project and the other tools mentioned aren't mine; the manifests and compiled output are reproducible from the repo. The setup Damn Vulnerable MCP (DVMCP) is a t...