How MCP servers can steal your... Note