Interactive MCP explainer walks through the protocol and its security risks
What happened
Runlayer's MCP Explained, reported on Hacker News on November 5, walks through the protocol via an interactive message flow. It is based on the November 25, 2025 MCP spec and covers JSON-RPC message formats, the lifecycle, transports, and client and server capabilities. It separates protocol mechanics from implementation tricks like tool search and Codemode, and covers attacks such as tool poisoning and prompt injection plus extension mechanisms, putting protocol operation, implementation and security risk in one framework.
Written by AI from the coverage · updated 9 hours ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageMCP Explained
Runlayer 制作的 MCP Explained 以交互消息流讲解 MCP 的 JSON-RPC 消息格式、生命周期、传输方式及客户端与服务端功能。内容以 2025-11-25 规范为基础，区分协议机制与工具搜索、Codemode 等实现技巧，并介绍工具投毒、提示词注入等攻击及扩展机制。
Heat over time
Heat now 8·Comparable peak 10（Nov 5 23:00）·Comparable change over 24 hours –
The trend only compares accounts observed without gaps, so its range may be smaller than the current heat. Hover or tap the chart for each hour; the left and right arrow keys step through it.