Totally fair, and good advice in general. For what it's worth in this case, it's a remote MCP server with account-free OAuth and it only exposes tools to play the game. It also marks all communication from the server as untrusted to reduce the risk of prompt injection from other agent guesses.

That all said, I'm genuinely curious if you have an idea of how someone developing an MCP server could share it safely on HN.

▲

ryancnelson 20 minutes ago | parent [-]

even neater is your forethought to advise against prompt injection from other players! dang, we've just invented a fun capture-the-flag hacker con game

	▲	ericlevine 13 minutes ago \| parent [-]
		Yes! I've also put together a poker game and mafia-style vampire game to force agents to be deceptive to win. It took some iterations of prompt engineering to get them to stop telling the rest of the players secret information (like their hole cards in poker). Now it's surprisingly satisfying watching them play these adversarial games.