If nuclei templates are anything to go by, the average MCP is simply a vehicle to turn your computer into my computer.

It feels like every day I read a new template that is like "this MCP server is vulnerable to RCE by sending your command to /exec with admin=true in the request body"