Otto Support - Logging and Visibility in MCP Servers
ResearchModel Context Protocol (MCP) Read at Bishop Fox
Below is the opening; the full story is at Bishop Fox.
From Bishop Fox
TL;DR
otto-support ships with two log files side by side, a bare-bones default log and a full audit log, so a reader can see exactly what an investigator could recover after each attack class in this series. This entry walks through that comparison, pairs it with the EchoLeak case that mirrors the gap, and covers the structured logging controls that EU AI Act traceability requirements will soon make mandatory.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.