Quick question about securing your MCP server

[davricksattorov]

Hi all, I came across Desktop Commander MCP and had a genuine question.

I'm an engineer building a small tool for people who build MCP servers, and before I go further I want to be sure the problem is real. Two quick things:

• Has anyone (a customer, a security team, an auditor) ever asked you to prove your MCP server is secure? What happened?
• How do you check your own server's security today, if at all?

"Nobody's ever asked" is as useful to me as "yes, constantly."

Thanks a lot in advance.