Episode Details

When you connect an MCP server to GitHub or Hugging Face, you have two doors: a browser login or a token you generate yourself. They look like a style preference, but they're really a decision about how much of your account an agent gets to touch. This episode walks through what the GitHub CLI login actually hands you (one token, no expiry, repo-wide scopes), why GitHub Apps and the newer Hugging Face CLI behave differently, and how fine-grained personal access tokens shrink the blast radius. Then we check what the MCP spec itself says — it draws the line by transport, not by preference — and why a prompt-injection attack from a public issue thread is the scenario that should really decide it. Episode 6123 — myweirdprompts.com/n/6123 (permanent short link: myweirdprompts.com/020041)