Continue.dev MCP Server Hub vs Lilith-Zero

“The primitive here is clear: a curated registry plus an in-IDE installer that replaces the current MCP setup flow — which is, charitably, 'edit your JSON config manually and pray.' The DX bet is that discovery and install should happen inside the editor, not on a GitHub README, and that is exactly the right call. The moment of truth — adding your first server — is the test, and if it actually resolves the config, sets credentials, and reflects in the AI context without a restart, this is genuinely worth shipping. My only flag is that 200 community-built servers with no quality signal is a registry problem waiting to happen; I want star counts, install counts, or at minimum a verified badge before I trust this in a production workflow.”

“The Kani formal verification and cargo-fuzz integration tell me this isn't just a vanity security project—it's been engineered to actually be correct. Sub-millisecond overhead means there's no reason not to run this in front of every MCP agent deployment. 15 stars seems like an embarrassing undercount given what this does.”

“Category is IDE-native MCP management; the direct competitor is 'copy the JSON blob from the MCP server's README into your config file,' which is genuinely terrible UX. Continue shipping this is the right call because they've identified the actual friction point in MCP adoption — it's not the protocol, it's the installation ceremony. Where this breaks: any power user with a non-standard monorepo setup, a corporate proxy, or MCP servers that need per-project credential scoping will hit walls fast. The kill condition in 12 months is that VS Code ships a native extension marketplace for MCP — Microsoft has every incentive to own this layer — and Continue's hub becomes redundant overnight unless they've built enough workflow lock-in by then.”

“The claims are impressive but 15 GitHub stars and one maintainer is not a security tool I'd deploy in production. Security tools require adversarial testing by the community over time—not just formal verification. The fail-closed design is correct philosophically, but I'd want to see 6 months of battle-testing and independent security audits before trusting it with real agent deployments.”

“The thesis is falsifiable: MCP becomes the dominant context-injection standard for AI-assisted development, and whoever owns the discovery and install layer owns developer mind-share the way npm owns JavaScript package discovery. What has to go right is MCP not getting forked or superseded by a proprietary protocol from Anthropic, OpenAI, or Microsoft in the next 18 months — that's a real dependency, not a vibe. The second-order effect that interests me most is not developer productivity but server economics: if this hub succeeds, it creates a marketplace incentive for SaaS companies to publish MCP servers as a distribution channel, which flips the 'AI needs to integrate with your tool' dynamic into 'your tool needs to publish to AI contexts.' Continue is riding the MCP standardization trend and is early enough that this could become infrastructure, but only if MCP itself doesn't fragment.”

“This is the tool that enterprise security teams will demand before they let any AI agent touch production systems. The taint tracking model is particularly elegant—once data is tagged as sensitive, it can't flow to untrusted destinations regardless of what the LLM decides to do. This is the kind of principled security primitive the agentic ecosystem desperately needs.”

“The job-to-be-done is singular and clean: get an MCP server running in my IDE without touching a config file. That focus is the product's biggest strength — they haven't tried to also be a server-testing tool or an MCP debugging console. The onboarding question is whether a developer gets from 'open hub' to 'MCP server active in context' in under two minutes, and based on the described flow that seems achievable if credential prompting is handled inline rather than punted to documentation. The gap between what's shipped and what's needed is quality curation: 200 servers with no signal about which 20 are actually production-ready means users will install a broken server on their first try, get frustrated, and never come back — that's the specific product decision that needs to happen next.”

“Way too deep in the Rust/MCP security weeds for me to evaluate or use. This is infrastructure for enterprise AI security teams—not something a content creator or indie builder will interact with directly. Worth knowing it exists; not something I'll try this week.”