How to vet a third-party MCP server before you install it
Five checks to run before you connect an MCP server someone else wrote: who publishes it, whether the package matches its repository, what access it asks for, what its tool descriptions tell the model, and which version will run.