TL;DR - Decision Matrix
| Your Situation | Immediate Action | Time |
|---|---|---|
| Solo dev, public repos | Install output scanner hook | 5 min |
| Team, sensitive codebase | + MCP vetting + injection hooks | 30 min |
| Enterprise, production | + ZDR + integrity verification | 2 hours |
Right now: Check your MCPs against the Safe List below.
NEVER: Approve MCPs from unknown sources without version pinning. NEVER: Run database MCPs on production without read-only credentials.