Comment by XiaHua

We monitor both the app layer and the MCP servers. We run a hosted version of https://github.com/traceforce/mcp-xray in our backend to constantly pentest MCPs and their supply chains. If you are going to DEF CON or BSides LV, we'll have our demo labs and CFP to talk about open-source MCP testing.