I Vibe Coded a Security Risk: How an MCP Connector Exposed My App

A nontechnical writer vibe coded Tastemaker, an app that builds writing style guides, and added an MCP connector so agents like Claude Code and Codex could pull style guides directly. After deploying, GPT-5.6 Sol found the live connector had a public registration route anyone could walk through; no evidence of data access was found, and the connector was shut down.