Who's Auditing Your AI's Tools? Building an ISO...

This is a submission for the Notion MCP Challenge What I Built A question most organisations have not yet asked: who is auditing the MCP servers your AI agents depend on? Every time an AI agent calls a tool-whether to read a file, query a database, or hit an API-it places trust in an MCP server. That server might: contain command injection vulnerabilities. It might exfiltrate credentials via undisclosed network calls. It might embed hidden instructions in tool descriptions designed to manipulate