MCP Is Dead? No, Just Splitting Under Weight.
OX Security uncovered a critical RCE in Anthropic's MCP SDKs spanning 150 million downloads. Anthropic called the flaw expected. Token bloat and architectural rigidity are driving a bifurcation away from heavyweight wrappers toward lightweight CLI alternatives.
May 30, 20263 min read