security1 distinct publisher
Air Security hijacked live Official MCP Registry entries by buying their expired domains
The MCP layer inherits its trust at install time and never re-checks it, so a lapsed domain behind a still-listed registry entry belongs to whoever registers it next. Air Security says it registered one, and agents came.
Publishers:air.security
Reality
- Evidence30
- Adoption
- Insufficient