Always-On Attack Surface
ArchitectureAn MCP tool server is a continuously running process — bound to a port, reachable from the network, and exploitable 24/7. MPP tools are dormant WASM binaries. The attack surface only exists during the milliseconds of each tool call.
100%
MCP exposure
of the day, always-on
1.08%
MPP exposure
of the day, on-demand
1+
MCP open ports
HTTP/S listener always bound
0
MPP open ports
no listener between calls
Attack surface over 24 hours — red = exploitable window
Without MPP (MCP server)100% exposure
0:006:0012:0018:0024:00
With MPP (on-demand WASM)1.08% exposure
0:006:0012:0018:0024:00
Each spike = one tool invocation (~2 seconds). Between calls: no process, no port, no attack surface.
| Property | MCP Server | MPP Tool |
|---|---|---|
| Network listener | Always bound | None |
| Process lifetime | Continuous | Per invocation only |
| Web framework CVE exposure | Yes (Express, Axum, etc.) | None (no web server) |
| Attack window | 24/7 | Duration of call (~ms–s) |
| TLS library exposure | Always | Never |