Testing capgate's Limits: How Capability Sandboxing Handles Real MCP Attacks

capgate, a compile-time sandbox compiler, demonstrates both the effectiveness and blind spots of capability-based security when tested against Damn Vulnerable MCP—a suite of deliberately flawed servers. For organizations adopting MCP servers, understanding exactly which attacks capgate can stop and which it cannot is critical for building robust security defenses.